ZyXEL Communications 3.1 User Manual

Chapter 19 L2TP VPN

ZyWALL (ZLD) CLI Reference Guide

Default_L2TP_VPN_Connection is pre-configured to be convenient to use for L2TP VPN. If you 
use it, edit the following.

Configure the local and remote policies as follows.

• For  the  Local Policy, create an address object that uses host type and contains the My Address 

IP address that you configured in the Default_L2TP_VPN_GW. Use this address object in the 
local policy.

• For  the  Remote Policy, create an address object that uses host type and an IP address of 

0.0.0.0. Use this address object in the remote policy.

You must also edit the Default_L2TP_VPN_GW gateway entry.

• Configure the My Address setting according to your requirements.
• Replace the default Pre-Shared Key.

You must configure a policy route to let remote users access resources on a network behind the 
ZyWALL. 

• Set the policy route’s Source Address to the address object that you want to allow the remote 

users to access (LAN_SUBNET in the following figure). 

• Set  the  Destination Address to the IP address pool that the ZyWALL assigns to the remote 

users (L2TP_POOL in the following figure).

Policy Route for L2TP VPN