L2TP/IPSec with Cisco IOS server and win 2000/XP remote access

[orieben]

hello,

i'm trying to setup a remote access VPN connexion with L2TP/IPSec

I have a cisco server 3640 (12.2(4)T) and some laptop with windows

2000 and Windows XP.

I did the VPN with L2TP between win2000 and the cisco server but when

i want to add IPSec, i have some trouble.

Does someone know how to do.

1)Which certificate signature type are compatible between windows and

cisco?

2)how to set up the certificate in window 2000/XP?

3)is it better to use the client cisco 3.5 or the client include in

windows 2000/XP?

4)Which are the step to configure IPSec in Cisco IOS 3640?

thanks by advance

Nicolas

[yusuff]

To configure L2TP/IPSec, the basic rule is that the match address is host-to-host both on port 1701

eg;

access-list 101 permit udp host 20.1.1.1 eq 1701 host 20.1.1.2 eq 1701

If your L2TP works without IPSec, then only thing you have to do is configure IPSec on the router with an ACL for src/dst port 1701 and all other IPSec config is normal way you do for LAN-to-LAN.

Here is a sample config of 2-routers doing IPSec and encrypting L2TP traffic;

http://www.cisco.com/warp/customer/707/24.html

and here is another sample config for configuring L2TP over IPSec from a Windows 2000 or XP Client to a Cisco VPN 3000 Series Concentrator

http://www.cisco.com/warp/customer/471/vpn3k_l2tp.html

you can combine the 2 URLs above to achieve your task.

HTH

R/Yusuf