L2TP GEO block

DanniKool · January 2023

Is it somehow possible to GEO block on L2TP in Remote access VPN?

Zyxel_Emily · February 2023

You need to create two security policy rules. In the following example, we allow Geo IP "Taiwan" only to establish L2TP VPN.

In the first policy, action: Allow, source: allowed Geo-IP, destination: Device, dst. port: 1701, 4500, 500

In the second policy, action: Deny, source: Any, destination: Device, dst. port: 1701, 4500, 500

Zyxel_Emily · February 2023

You can add security policy rule as follows.

DanniKool · February 2023

That doesn't work - not even with a NAT rule.....

Zyxel_Emily · February 2023

You need to create two security policy rules. In the following example, we allow Geo IP "Taiwan" only to establish L2TP VPN.

In the first policy, action: Allow, source: allowed Geo-IP, destination: Device, dst. port: 1701, 4500, 500

In the second policy, action: Deny, source: Any, destination: Device, dst. port: 1701, 4500, 500

DanniKool · February 2023

Thanks Emily

It's works great!

Welcome!