Chapter 8 Security

Click Security > L2TP VPN > L2TP Client > Add to open this screen as shown next.

Figure 76 L2TP Client: Add

This screen contains the following fields:

Table 58 L2TP Client: Add

LABEL

DESCRIPTION

Profile Name

Enter the name for this client connection.

 

 

L2TP Protocol

Select the L2TP Protocol Version 2 or 3. L2TPv2 is a standard method for

Version

tunneling Point-to-Point Protocol (PPP) while L2TPv3 provides improved support

 

for other types of networks including frame relay and ATM.

 

 

NAT Mode?

Select Yes if the client will be located behind a NAT enabled router. This will

 

allow multiple clients using NAT to connect with L2TP at the same time.

 

 

Auth Protocol

Select the Authentication Protocol allowed for the connection. Options are:

 

• PAP - Password Authentication Protocol (PAP) authentication occurs in clear

 

text and does not use encryption. It’s probably not a good idea to rely on this

 

for security.

 

• CHAP - Challenge Handshake Authentication Protocol (CHAP) provides

 

authentication through a shared secret key and uses a three way handshake.

 

• MSCHAPv1 - Microsoft CHAP v1 (MSCHAPv1) provides authentication

 

through a shared secret key and uses a three way handshake. It provides

 

improved usability with Microsoft products.

 

• MSCHAPv2 - Microsoft CHAP v2 (MSCHAPv2) provides encryption through a

 

shared secret key and uses a three way handshake. It provides additional

 

security over MSCHAPv1, including two-way authentication.

 

 

MPPE Encryption

If MSCHAPv1 or MSCHAPv2 is selected as an Auth Protocol, use the drop-

 

down list box to select the type of Microsoft Point-to-Point Encryption (MPPE).

 

Options are:

 

• MPPE 40 bits - MPPE with 40 bit session key length

 

• MPPE 128 bits - MPPE with 128 bit session key length

 

• Auto - Automatically select either MPPE 40 bits or MPPE 128 bits

 

 

MPPE Stateful?

Select Yes to enable stateful MPPE encryption. This can increase performance

 

over stateless MPPE, but should not be used in lossy network environments like

 

layer two tunnels over the Internet.

 

 

Server IP Address

Enter the IP address of the L2TP server.

 

 

User Name

Enter the user name for connecting to the L2TP server.

 

 

136

 

WiMAX Device Configuration User’s Guide