Step 1: Lets begin by navigating to the Address Book by choosing Objects->Address Book.
Step 2: Please Click Add->IP Folder and create a folder to hold your L2TP Over IPSec IP Address Objects, in this example it is called VPN.
![](http://images.dlink.com/new/articles/A10490/A10490_image1.png)
Step 3: Then click Add->IP4 Address to add an IP Object to assign L2TP client IPs from, In this example it is called L2TP_Client_Pool and is 192.168.1.50-192.168.1.99.
![](http://images.dlink.com/new/articles/A10490/A10490_image2.png)
Step 4: Navigate to Authentication Objects by choosing Objects->Authentication Objects.
Step 5: Click Add->Pre-shared key, for our example I named it IPsec_Backbone and used a secret of dlink.
![](http://images.dlink.com/new/articles/A10490/A10490_image3.png)
Step 6: Please go to IPSec Servers by clicking Interfaces->IPsec.
Step 7: Add an IPsec Server by clicking Add->IPsec Tunnel, the nesccesarry settings are in the chart below.
![User-added image](http://images.dlink.com/new/articles/A10490/A10490_image4.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image5.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image6.png)
![User-added image](http://images.dlink.com/new/articles/A10490/A10490_image7.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image8.png)
Step 8: Navigate to L2TP Servers by clicking Interfaces->PPTP/L2TP Servers.
Step 9: Add an L2TP Server by choosing Add->PPTP/L2TP Server. Please match the below settings.
![User-added image](http://images.dlink.com/new/articles/A10490/A10490_image9.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image10.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image11.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image12.png)
Step 10: Browse to User Databases by choosing User Authentication->Local User Databases.
Step 11: Add a User Database by clicking Add->Local User Database. Name it L2TP_Over_IPsec.
![](http://images.dlink.com/new/articles/A10490/A10490_image13.png)
Step 12: Add a User by clicking Add->User. Please assign a Username and Password of your choice.
![](http://images.dlink.com/new/articles/A10490/A10490_image14.png)
Step 13: Navigate to User Authentication Rules by clicking User Authentication->User Authentication Rules.
Step 14: Add an User Authentication Rule by clicking Add->User Authentication Rule. The correct settings can be found in the table below.
![User-added image](http://images.dlink.com/new/articles/A10490/A10490_image15.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image16.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image17.png)
![](http://images.dlink.com/new/articles/A10490/A10490_image18.png)
Step 15: Please visit the IP Rules secion by clicking Rules->IP Rules.
Step 16: Add a rule to allow VPN clients to ping the LAN IP of the DFL by choosing Add->IP Rule and filling in the below settings.
![](http://images.dlink.com/new/articles/A10490/A10490_image19.png)
Name: L2TP_Over_IPsec_Ping_FW
Action: Allow
Service: ping-inbound
Schedule: (None)
Source Interface: L2TP_Over_IPsec
Source Network: L2TP_Client_Pool
Destination Interface: core
Destination Network: LAN_IP
Step 17: Add an IP Rule Folder by clicking Add->IP Rule Folder. Name this new folder L2TP_Over_IPsec.
![](http://images.dlink.com/new/articles/A10490/A10490_image20.png)
Step 18: Add an Ingress IP Rule for the VPN by choosing Add->IP Rule and filling in the below settings.
![](http://images.dlink.com/new/articles/A10490/A10490_image21.png)
Name: L2TP_Over_IPsec_Ingress
Action: Allow
Service: all-services
Schedule: (None)
Source Interface: L2TP_Over_IPsec
Source Network: L2TP_Client_Pool
Destination Interface: LAN
Destination Network: LAN_Net
Step 19: Add an Egress IP Rule for the VPN by choosing Add->IP Rule and filling in the below settings.
![](http://images.dlink.com/new/articles/A10490/A10490_image22.png)
Name: L2TP_Over_IPsec_Egress
Action: Allow
Service: all-services
Schedule: (None)
Source Interface: LAN
Source Network: LAN_Net
Destination Interface: L2TP_Over_IPsec
Destination Network: L2TP_Client_Pool
Step 20: Add L2TP Internet Access IP Rule by choosing Add->IP Rule and following the below template.
![](http://images.dlink.com/new/articles/A10490/A10490_image23.png)
Name: L2TP_Over_IPsec_Internet
Action: NAT
Service: all-services
Schedule: (None)
Source Interface: L2TP_Over_IPsec
Source Network: L2TP_Client_Pool
Destination Interface: WAN
Destination Network: all-nets
Step 21: Save and Activate your changes by clicking Configuration->Save and Activate. Once you have logged back in you will have completed yout L2TP over IPsec Tunnel configuration.