PPTP and L2TP VPN Client. Secure Computing SG570, SG300, SG560, SG565, SG550, SG530, SG580, SG575

To authenticate using an x.509 Certificate Tunnel, you must first install the local certificate. The distinguished name of this local certificate must match the name entered in Client Distinguished Name when configuring the x.509 certificate tunnel on the SnapGear unit.

See Certificate Management and Using certificates with Windows IPSec in the IPSec section later in this chapter for details on creating, packaging and adding certificates for use by Windows IPSec.

Note

Once a certificate is added, Windows IPSec automatically uses it to attempt to authenticate the connection. If more than one certificate is installed, it tries each of them in turn.

Authentication fails if the Windows client’s certificate and the SnapGear unit’s certificate are not signed by the same certificate authority.

Your VPN client is now set up and ready to connect.

Connect the remote VPN client

Verify that you are connected to the Internet, or have set up your VPN connection to automatically establish an initial Internet connection.

Select the connection for the SnapGear unit VPN.

Enter a user name and password added in the Configuring user accounts for VPN server section and click Connect.

PPTP and L2TP VPN Client

The PPTP and L2TP client enables the SnapGear unit to establish a VPN to a remote network running a PPTP or L2TP server (usually a Microsoft Windows server).

Although the VPN protocols are different, configuration of client tunnels is exactly the same.

Virtual Private Networking

209

Select PPTP VPN Client or L2TP VPN Client from the VPN section of the main menu.

Any existing client tunnels are displayed alongside icons to Enable/Disable, Delete, and

Edit them.

To add a new tunnel, click New.

Ensure Enable is checked, and enter: the connection.

The remote PPTP or L2TP Server IP address to connect to. may need to obtain this information from the system administrator of the remote

PPTP server. which packets should go the remote network. remote network that the remote PPTP or L2TP server allocates the SnapGear unit. and want traffic from your local network to be routed through the tunnel instead of straight out onto the Internet.

Click Finish.

Virtual Private Networking

210