TMS zl Management and Configuration Guide ST.1.1.100430

7-147
Virtual Private Networks
Configure an L2TP over IPsec VPN
Note Later you will configure firewall access policies to allow the IKE messages
from the remote endpoints.
Refer to Figure 7-123 for help configuring the next setting.
Figure 7-123. Example L2TP over IPsec VPN
6. For Local Gateway, specify the TMS zl Module IP address that will act as
the VPN gateway (indicated by 1 in the figure). You have two options:
• Select IP Address and type an IP address in the box.
The IP address must be an IP address that is already configured on
the TMS zl Module and that the remote endpoints can reach. For
example, if the remote endpoints connect to the module through the
Internet, specify the IP address on the module’s Internet VLAN.
• Select Use VLAN IP Address and select a VLAN from the list, which
includes all TMS VLANs on this module.
Select the VLAN on which the remote endpoints reach the TMS zl
Module. For example, if the remote endpoints connect to the module
through the Internet, specify the VLAN that connects to the Internet.