L2TP GEO block

DanniKool

Is it somehow possible to GEO block on L2TP in Remote access VPN?

Zyxel_Emily

Hi @DanniKool,

You need to create two security policy rules. In the following example, we allow Geo IP "Taiwan" only to establish L2TP VPN.

In the first policy, action: Allow, source: allowed Geo-IP, destination: Device, dst. port: 1701, 4500, 500

In the second policy, action: Deny, source: Any, destination: Device, dst. port: 1701, 4500, 500

Zyxel_Emily

Hi @DanniKool,

You can add security policy rule as follows.

DanniKool

That doesn't work - not even with a NAT rule.....

Zyxel_Emily

Hi @DanniKool,

You need to create two security policy rules. In the following example, we allow Geo IP "Taiwan" only to establish L2TP VPN.

In the first policy, action: Allow, source: allowed Geo-IP, destination: Device, dst. port: 1701, 4500, 500

In the second policy, action: Deny, source: Any, destination: Device, dst. port: 1701, 4500, 500

DanniKool

Thanks Emily

It's works great!