Specifications

4-5
VPN 3000 Series Concentrator Getting Started
78-15733-03
Chapter 4 Using the Command-Line Interface for Quick Configuration
Configuring Tunneling Protocols and Options
At the cursor, enter the IP address of the default gateway (for example, 10.10.0.1). This address must not
be the same as the IP address configured on any VPN Concentrator interface. To specify no default
gateway—which means the VPN Concentrator drops unrouted packets—leave this entry blank.
Configuring Tunneling Protocols and Options
This section describes how to enable, disable, and configure virtual private network tunneling protocols
and encryption options on the VPN Concentrator. You must enable at least one of the following protocols
for the device to function as a VPN device. The protocol choices are PPTP (Point-to-Point Tunneling
Protocol) and L2TP (Layer 2 Tunneling Protocol), with or without Microsoft encryption required; and
IPSec (IP Security protocol). PPTP and L2TP are popular with Microsoft Windows-based clients, and
the Cisco VPN Client uses IPSec.
To enable, disable, and configure virtual private network tunneling protocols and encryption options on
the VPN Concentrator, follow these steps:
Step 1 The system shows default settings for PPTP and L2TP—both enabled, both with no encryption required.
It then prompts you to enable or disable PPTP.
-- : Configure protocols and encryption options.
-- : This table shows current protocol settings
PPTP | L2TP |
---------------------------------------------
| Enabled | Enabled |
| No Encryption Req | No Encryption Req |
---------------------------------------------
1) Enable PPTP
2) Disable PPTP
Quick -> [ 1 ]
At the cursor, enter 2 to disable PPTP, or press Enter to accept the default (1), which enables PPTP.
Step 2 If you enable PPTP, the system prompts you to select the encryption option.
• PPTP Encryption Required—PPTP connections must use Microsoft encryption to encrypt data. This
option requires MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol) and provides
maximum security. During connection setup, clients must agree to use encryption or they will not
be connected.
• No Encryption Required—PPTP connections may use Microsoft encryption to encrypt data. During
connection setup, clients might or might not agree to use Microsoft encryption; they will be
connected in either case.
1) PPTP Encryption Required
2) No Encryption Required
Quick -> [ 2 ]
At the cursor, enter 1 to require encryption, or press Enter to accept the default (2), which does not
require encryption. Accept the default if you disabled PPTP.