TMS zl Management and Configuration Guide ST.1.0.090213

7-263
Virtual Private Networks
Configure the VPN Client
TMS zl Module Settings for an L2TP over IPsec Connection
to a Windows Vista Endpoint
Table 7-19 displays the settings that should be established on the TMS zl
Module to support the L2TP over IPsec connection. The table also displays
necessary firewall policies. Finally, note that VLANs and necessary routes
should already be in place on the TMS zl Module.
Table 7-19. Settings for an L2TP over IPsec Connection on the TMS zl Module
Parameter Valid Settings Configuration Window Matching Setting on the
Windows Vista Client
IKE policy
Policy Type Client-to-Site (Responder) Add IKE Policy—Step 1
of 3
Local Gateway TMS zl Module’s IP address or VLAN that the
remote clients can reach
• Destination address
in the IP filter (step 29
on page 7-233)
• Internet address for
the VPN connection
(step 72 on page 7-
254)
Local ID Type IP Address
Local ID Value Same IP address configured for the Local
Gateway
Remote ID Type • With preshared keys, IP Address
• With digital certificates, the type for the
subject name in the certificate (typically,
Distinguished Name or Domain Name)
Remote ID Value • With preshared keys, 0.0.0.0
• With digital certificates, a value or
wildcard that matches the certificate
subject name