How to configure VPN Site-to-Site with L2TP IPSec

 

1. Create VPN Profile
2. Create VPN User and Set static Remote IP
3. Enable L2TP Server 
4. IPSec 
• Profile 
• Proposal
5. Static Route 
6. Configure NAT Rule
7. Configure Firewall rule to accept L2TP IPSec VPN

HQ-SITE

1. Create VPN Profile

2. Create VPN User and Set Static Remote IP

3. Enable L2TP Server

4. IPSec 

• Profile

• Proposal

5. Static Route Site-A

5. Static Route Site-B

6.Configure NAT Rule

• Add Address Lists

• Add NAT

7. Configure Firewall Rule to accept L2TP IPSec

• Add Address Lists

• Add Firewall Rule ESP-IP-Protocol 50

• Add UDP Ports 500,4500,1701

*Reference 

SITE-A

1. Create L2TP Client Interface
2. IPSec
• Profile
• Proposal
3. Static Route
4. NAT Rule

1. Create L2TP Client Interface

2. IPSec

• Profiles

• Proposal

3. Configure Route

•     Route to HQ

• Route to Site-B

4.Add NAT Rule

SITB-B (Do the same Site-A)