Configuring a PPP connection profile and virtual line on System-B
Now that a VPN connection is configured on System-B you need to create the PPP profile for System-B. The PPP profile has no physical line associated with it; instead, it uses a virtual line. This is because the PPP traffic tunnels through the L2TP tunnel, while VPN protects the L2TP tunnel.
Follow these steps to create a PPP connection profile for System-B:
- IniSeries™ Navigator, expand System-B > Network > Remote Access Services.
- Right-click Responder Connection Profiles and select New Profile.
- On the Setup page, select PPP for the protocol type.
- For Mode selections, select L2TP (virtual line).
- Select Terminator (network server) from the Operating mode drop-down list.
- Click OK to PPP profiles properties pages.
- On the General page, enter a name that identifies the type and the destination of the connection. In this case, enter tobranch.
The name you specify must be 10 characters, or less.
- Optional: Specify a description for the profile
- Go to the Connection page.
- Select the IP address of the local tunnel endpoint, 205.13.237.6.
- In the Virtual line name field, select tobranch from the drop-down list. Remember that this line has no associated physical interface.
The virtual line describes various characteristics of this PPP profile; for example, the maximum frame size, authentication information, the local host name, and so on. The L2TP Line Properties dialog box opens.
- On the General page, enter a description for the virtual line.
- Go to the Authentication page
- In the Local host name field, enter the host name of the local key server, SystemB.
- Click OK to save the new virtual line description and return to the Connection page.
- Go to the TCP/IP Settings page.
- In the Local IP address section, select the fixed IP address of the local system, 10.6.11.1.
- In the Remote IP address section, select Address pool as the address assignment method. Enter a starting address,
and then specify the number of addresses that can be assigned to the remote system.
- Select Allow remote system to access other networks (IP forwarding).
- Go to the Authentication page to set the user name and password for this PPP profile.
- In the Local system identification section, select Allow the remote system to verify the identity of this system. This opens the Local System Identification dialog box.
- Under Authentication protocol to use select Require encrypted password (CHAP-MD5).
- Enter the user name, SystemB, and a password.
- Click OK to save the PPP profile.
Parent topic:
Scenario: Protecting an L2TP voluntary tunnel with IPSec