L2TP/IPsec Remote Access VPN Configuration Example

On current versions of AZTCO-FW software, L2TP/IPsec may be configured for mobile clients, though it is not a con- figuration we recommend.

Warning: Users have reported issues with Windows L2TP/IPsec clients behind NAT. If the clients will be behind NAT, Windows clients will most likely not function. Consider an IKEv2 implementation instead.

As warned at the start of the chapter, the Windows client, among others, and the strongSwan IPsec daemon are not always compatible, leading to failure in many cases. We strongly recommend using another solution such as IKEv2 instead of L2TP/IPsec.