fortigate-ipsec-40-mr3

FortiOS Handbook
L2TP and IPsec (Microsoft VPN)
Overview
This section describes how to set up a VPN that is compatible with the Microsoft
Windows native VPN, which is Layer 2 Tunneling Protocol (L2TP) with IPsec encryption.
The following topics are included in this section:
Overview
Assumptions
Configuring the FortiGate unit
Configuring the Windows PC
Troubleshooting
The topology of a VPN for Microsoft Windows dialup clients is very similar to the topology
for FortiClient Endpoint Security clients.
Figure 33: Example FortiGate VPN configuration with Microsoft clients
Remote Client
For users, the difference is that instead of installing and using the FortiClient application,
they configure a network connection using the software built into the Microsoft Windows
operating system. Starting in FortiOS 4.0 MR2, you can configure a FortiGate unit to work
with unmodified Microsoft VPN client software.
Layer 2 Tunneling Protocol (L2TP)
Port 1
172.20.120.141
Remote Client
FortiGate_1 GGGGGG at at at at at at ateeeeee_ tee_11111111
Port 2
10.11.101.100
Office LAN
10.11.101.0/24
Samba Server
10.11.101.180
FTP Server
10.11.101.170
DNS Server
10.11.101.160
HTTP/HTTPS
10.11.101.120
L2TP is a tunneling protocol published in 1999 that is used with VPNs, as the name
suggests. Microsoft Windows operating system has a built-in L2TP client starting since
Windows 2000. Mac OS X 10.3 system and higher also have a built-in client.
FortiOS Handbook v3: IPsec VPNs
01-434-112804-20120111 199
http://docs.fortinet.com/