[NEBULA] How to setup L2TP VPN client connection with Authentication Server?

Zyxel_CSO
Posts: 295
Master Member





Nebula Cloud platform offers the option to allow L2TP VPN users to authenticate wired/wireless networks over radius and(or) AD servers, connecting to local domain controllers in the network.
Prerequisite: Client VPN IP addresses cannot overlap LAN subnet
Scenario: Setup L2TP VPN connection with Radius/AD servers in Windows server 2008
Preparation: NSG100 *1, NSW100 *1, RADIUS Server *1 and AD Server *1 in Windows server 2008, iPhone 6S+ *1 and Laptop x1

NCC Configuration for authentication server
1. Gateway > Configure > My authentication server > My RADIUS Server > Add
2. Enter information in My Radius Server > Save
In order to use My RADIUS server option, user is required to configure the Radius server and Active Directory roles in the domain controller
Radius Server Configuration
3. Add new RADIUS Client
Server Manager > Role > Network Policy and Access Services > NPS(local) > RADIUS Clients and Servers > RADIUS Client > New RADIUS Client > Enter information in red > OK

4. Add new RADIUS Client
Enter Policy name (eg: USG) > Next
Select Client IPv4 Address > Add > Enter WAN NSG100 IP (eg: 10.214.30.67) > OK

Active Directory Server Configuration
5. Add new AD user
Server Manager >Role > Active Directory Domain Services > Active Directory Users and Computers > zyxel.cso.com > Users > New > User
Enter user logon name (eg: [email protected]) > Next
Enter password > Next > Finish
NCC for L2TP VPN client configuration
6. Gateway > Configure > L2TP over IPSec client > Toggle on > Configure information in red > Save
L2TP VPN configuration on the end user (eg: iOS device)
7. iPhone > Setting > General > VPN > Add VPN Configuration > Type > L2TP

Connecting L2TP VPN from the end user (eg: iOS device)
8. iPhone > Setting > Toggle on VPN
L2TP Connection Result in End Client (Eg: iOS device)
9. iPhone > Setting > General > VPN
L2TP Connection Result on NCC
10. GATEWAY > Monitor > Event log > Category > Enter Auth > Search
Event log displays L2TP client login information
L2TP Connection Result on Event viewer in Windows Server 2008
Server Manager > Diagnostics > Custom views >Event Viewer> ServerRoles > Network Policy and Access Services
Scenario Result for authorizing L2TP Client over Authentication Server
L2TP Client IP 10.20.20.1 can access LAN host 10.214.30.16.
Prerequisite: Client VPN IP addresses cannot overlap LAN subnet
Scenario: Setup L2TP VPN connection with Radius/AD servers in Windows server 2008
Preparation: NSG100 *1, NSW100 *1, RADIUS Server *1 and AD Server *1 in Windows server 2008, iPhone 6S+ *1 and Laptop x1

NCC Configuration for authentication server
1. Gateway > Configure > My authentication server > My RADIUS Server > Add

2. Enter information in My Radius Server > Save

In order to use My RADIUS server option, user is required to configure the Radius server and Active Directory roles in the domain controller
Radius Server Configuration
3. Add new RADIUS Client
Server Manager > Role > Network Policy and Access Services > NPS(local) > RADIUS Clients and Servers > RADIUS Client > New RADIUS Client > Enter information in red > OK

4. Add new RADIUS Client

Enter Policy name (eg: USG) > Next

Select Client IPv4 Address > Add > Enter WAN NSG100 IP (eg: 10.214.30.67) > OK

Active Directory Server Configuration
5. Add new AD user
Server Manager >Role > Active Directory Domain Services > Active Directory Users and Computers > zyxel.cso.com > Users > New > User

Enter user logon name (eg: [email protected]) > Next

Enter password > Next > Finish


NCC for L2TP VPN client configuration
6. Gateway > Configure > L2TP over IPSec client > Toggle on > Configure information in red > Save

L2TP VPN configuration on the end user (eg: iOS device)
7. iPhone > Setting > General > VPN > Add VPN Configuration > Type > L2TP

Connecting L2TP VPN from the end user (eg: iOS device)
8. iPhone > Setting > Toggle on VPN

L2TP Connection Result in End Client (Eg: iOS device)
9. iPhone > Setting > General > VPN

L2TP Connection Result on NCC
10. GATEWAY > Monitor > Event log > Category > Enter Auth > Search
Event log displays L2TP client login information

L2TP Connection Result on Event viewer in Windows Server 2008
Server Manager > Diagnostics > Custom views >Event Viewer> ServerRoles > Network Policy and Access Services

Scenario Result for authorizing L2TP Client over Authentication Server
L2TP Client IP 10.20.20.1 can access LAN host 10.214.30.16.
Tagged:
0
Categories
- 8.1K All Categories
- 1.6K Nebula
- 60 Nebula Ideas
- 54 Nebula Status and Incidents
- 4.4K Security
- 224 Security Ideas
- 963 Switch
- 45 Switch Ideas
- 868 WirelessLAN
- 20 WLAN Ideas
- 5.2K Consumer Product
- 139 Service & License
- 268 News and Release
- 53 Security Advisories
- 12 Education Center
- 573 FAQ
- 273 Nebula FAQ
- 132 Security FAQ
- 73 Switch FAQ
- 72 WirelessLAN FAQ
- 7 Consumer Product FAQ
- Documents
- 34 Nebula Monthly Express
- 71 About Community
- 44 Security Highlight