Users Guide

162 | Configuration Reference Dell PowerConnect W-AirWave 7.4 | Configuration Guide
 Remote access VPNs allow hosts, such as telecommuters or traveling employees, to connect to private
networks such as a corporate network over the Internet. Each host must run VPN client software that
encapsulates and encrypts traffic and sends it to a VPN gateway at the destination network. The controller
supports the following remote access VPN protocols:
 Layer-2 Tunneling Protocol over IPSec (L2TP/IPSec)
 Point-to-Point Tunneling Protocol (PPTP)
 Site-to-site VPNs allow networks such as a branch office network to connect to other networks such as a
corporate network. Unlike a remote access VPN, hosts in a site-to-site VPN do not run VPN client software. All
traffic for the other network is sent and received through a VPN gateway that encapsulates and encrypts the
traffic.
Before enabling VPN authentication, you must configure the following:
 The default user role for authenticated VPN clients—this is configured with roles and policies.
 The authentication server group the controller will use to validate the clients—this is configured with server
groups.
You then specify the default user role and authentication server group in the VPN authentication profile.
The Advanced Services > VPN Services page displays all VPN service profiles that are currently configured, and
allows you to add VPN service profiles or to edit existing profiles.
Select the Add button to add a new VPN Service profile, or click the pencil icon next to an existing profile to
change its configuration. The VPN Services detail page appears, with settings defined in Table 87.
Table 87 Advanced Services > VPN Services > Add/Edit VPN Service Profiles Fields and Descriptions
Field Default Description
General Settings
Folder Top Set the folder with which the VPN service profile is associated. The drop-down menu
displays all folders available for association with the VPN services profile.
Name Blank Enter the name of the VPN services profile.
Other Settings
IKE Profile Select an IKE profile from the drop-down menu.
Select the add icon to add a new profile of this type, or click the pencil icon to edit an
existing IKE profile.
Refer to “Advanced Services > VPN Services > IKE” on page 163.
PPTP Profile Select a PPTK profile from the drop-down menu.
Select the add icon to add a new profile of this type, or click the pencil icon to edit an
existing PPTP profile.
Refer to “Advanced Services > VPN Services > L2TP” on page 164.
L2TP Profile Select an L2TP profile from the drop-down menu.
Select the add icon to add a new profile of this type, or click the pencil icon to edit an
existing L2TP profile.
Refer to “Advanced Services > VPN Services > L2TP” on page 164.
IPSEC Profile Select an IPSEC profile from the drop-down menu.
Select the add icon to add a new profile of this type, or click the pencil icon to edit an
existing IPSEC profile.
Refer to “Advanced Services > VPN Services > IPSEC” on page 166.