Configuration | User Management | Users | Add or Modify
12-39
VPN 3000 Concentrator Series User Guide
specifically designed to work with the VPN Concentrator. However, the VPN Concentrator can
establish IPSec connections with many protocol-compliant clients.
L2TP over IPSec = L2TP using IPSec for security. L2TP packets are encapsulated within IPSec, thus
providing an additional authentication and encryption layer for security. L2TP over IPSec is a
client-server protocol, and it provides interoperability with the Windows 2000 VPN c lient and other
compliant remote-access clients.
Note: If no protocol is selected, this user cannot access or use the VPN.
Figure 12-14: Configuration | User Management | Users | Add or Modify screen, IPSec tab
IPSec Parameters tab
This tab lets you configure IP Security Protocol parameters that apply to this user. If you checked IPSec
or L2TP over IPSec under Tunneling Protocols on the General Parameters tab, configure this section.
Value / Inherit?
On this tabbed section:
•The Inherit? check box refers to group parameters: Does this specific user inherit the given setting from
the group?
–Add screen = inherit base-group parameter setting.
–Modify screen = inherit assigned-group parameter setting, which can be the base group or a
configured group.
To inherit the group setting, check the box (default). To override the group setting, clear the box. If
you clear the check box, you must enter or change any corresponding Value field; do not leave the field
blank.
•The Value column thus shows either group parameter settings that also apply to this user (Inherit?
checked), or unique parameter settings configured for this user (Inherit? cleared). You cannot
configure a grayed-out parameter.