L2TP GEO block

Options
DanniKool
DanniKool Posts: 49 image  Freshman Member
First Answer First Comment Eighth Anniversary
in Nebula
Is it somehow possible to GEO block on L2TP in Remote access VPN?

Accepted Solution

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,492 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓
    Options
    You need to create two security policy rules. In the following example, we allow Geo IP "Taiwan" only to establish L2TP VPN.
    In the first policy, action: Allow, source: allowed Geo-IP, destination: Device, dst. port: 1701, 4500, 500
    In the second policy, action: Deny, source: Any, destination: Device, dst. port: 1701, 4500, 500

All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,492 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Options
    You can add security policy rule as follows.

  • DanniKool
    DanniKool Posts: 49 image  Freshman Member
    First Answer First Comment Eighth Anniversary
    Options
    That doesn't work - not even with a NAT rule.....
  • Zyxel_Emily
    Zyxel_Emily Posts: 1,492 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓
    Options
    You need to create two security policy rules. In the following example, we allow Geo IP "Taiwan" only to establish L2TP VPN.
    In the first policy, action: Allow, source: allowed Geo-IP, destination: Device, dst. port: 1701, 4500, 500
    In the second policy, action: Deny, source: Any, destination: Device, dst. port: 1701, 4500, 500

  • DanniKool
    DanniKool Posts: 49 image  Freshman Member
    First Answer First Comment Eighth Anniversary
    Options
    Thanks Emily

    It's works great!

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）