Allied Telesis AR440S manual Headquarters VPN access concentrators configuration

Headquarters

Headquarters VPN access concentrator's configuration

# System configuration

set system name=HQ

# User configuration

set user securedelay=600

#Add your approved roaming VPN client usernames. add user=roaming1 pass=roaming1 lo=no telnet=no add user=roaming2 pass=roaming2 lo=no telnet=no add user=roaming3 pass=roaming3 lo=no telnet=no add user=roaming4 pass=roaming4 lo=no telnet=no

#Define a security officer.

add user=secoff pass=<your-secoff-password> priv=securityofficer lo=yes telnet=yes

#Change the manager privilege user’s password. set user=manager password=<your-password>

#RADIUS configuration

#If desired, add a RADIUS authentication server for authenticating

#users.

add radius server=<radius-server-address>secret=<secret-key>

#PPP template configuration

#Create a template to use for incoming roaming Windows VPN client

#connections. This defines authentication and associates the IP pool

#of addresses that are allocated to clients.

create ppp template=1

set ppp template=1 bap=off ippool=roaming authentication=chap echo=10 lqr=off

#L2TP configuration

#Configure an L2TP server to accept incoming roaming Windows VPN

#client connections

enable l2tp

enable l2tp server=both

add l2tp ip=1.1.1.1-255.255.255.254 ppptemplate=1 tos=on

# IP configuration

enable ip

add ip int=vlan1 ip=192.168.140.254

#Configure eth0 for connecting to the Internet with a fixed address. add ip int=eth0 ip=200.200.200.1

add ip rou=0.0.0.0 mask=0.0.0.0 int=eth0 next=200.200.200.254

#Create an IP pool to allocate unique internal payload addresses to

#incoming VPN clients.

create ip pool=roaming ip=192.168.143.1-192.168.143.50

Page 38 AlliedWare™ OS How To Note: VPNs for Corporate Networks