This is an example for creating an L2TP VPN tunnel policy to a remote Windows 7 client.L2TP abbreviates Layer 2 Tunnelling protocol.

Ther router used here is aSRX5308 with subnet192.168.1.0/24

NOTE: This document assumes that your ProSAFE/ProSECURE router is either receiving a public IP address on the WAN interface or that the gateway device(s) have the correct port forwarding or DMZ configured so that port TCP port 1723 is open for the ProSAFE/ProSECURE routers, these gateway devices must also allow VPN pass-through.

The values used in this scenario are for this example only; certain values will depend on the setup of your network.

Setup SRX5308 as L2TP Server

1. Click VPN
2. Click L2TP Server
3. Select Enable and enter Starting to Ending IP range.
4. Select an authentication method: MSCHAPv2 in this example

Note: IP range must be different to existing LAN range in use.

Create L2TP users

1. Click Users
2. Click Add
3. Choose L2TP user
4. Enter username and password accordingly.

Once the account is created it will show in the list of Users in section Users – Users.

Create L2TP VPN on Windows client (using Windows 7 for this example)

1. Click Start – Control Panel – Network and Sharing Center.
2. Click Set up a new connection or network

   

3. Next, Click Connect to a workplace

   

4. Click Use my Internet connection (VPN)

   

5. Enter the WAN IP address or Internet name for the SRX5308
6. Name the new Connection
7. Select “Don’t connect now; just set it up so I can connect later”

   

8. Enter the Username and Password, created in Step Create L2TP User.
9. Click Create.
10. Click Close.

Now we need to edit the L2TP connection, to match the Authentication type of the SRX5308

1. Go to Network and Sharing Center
2. Click Change adapter setting
3. Right click on the newly created L2TP connection and select Properties.

   

   In the VPN connection properties page

4. Go to Security
5. Set Type of VPN to: Layer 2 Tunneling Protocol with IPSec (L2TP/IPSec)
6. Select Microsoft CHAP Version 2 (MS-CHAP v2)
7. Click OK

Connect the L2TP VPN

1. Go to Network and Sharing Center
2. Right click on the newly created L2TP connection
3. Click Connect

   

4. At the prompt enter username and password and click 'Connect'.
5. You have the option toselect and Save the username and password.

Confirm the L2TP VPN is established

1. Right click on the L2TP VPN connection in Network Connection
2. Select Status
3. We can see the connection is established.

Also, we can ping the IP address of the SRX5308.