# L2TP Default Settings

The default configuration settings for the Layer 2 Tunneling Protocol (L2TP) are used when establishing an L2TP or L2TP-over-IPSec tunnel with an L2TP user. You can define specific L2TP settings on a per-user basis that supersede these settings. For more information, see Local User Configuration. If you do not make such user-specific settings, the default settings are used.

### To Configure L2TP

1. To create or edit an L2TP default configuration, enter the following:

Default Authentication Server: Select the type of user authentication database from the authentication servers configured on the security device.

Query Client Settings on Default Server: Select this option to have the security device query the client settings on the authentication server.

IP Pool Name: Select an IP pool from drop-down list. (For information on creating IP pools, see IP Pool Configuration.)

PPP Authentication: Select the method for authenticating the L2TP user from the drop down menu. The choices are Password Authentication Protocol (PAP), Challenge Handshake Authentication Protocol (CHAP), or ANY (in which case, the security device negotiates CHAP first, and then if that fails, negotiates PAP).

DNS Primary Server IP: Enter the IP address of the primary Domain Name Service (DNS) server.

DNS Secondary Server IP: Enter the IP address of the secondary DNS server.

WINS Primary Server IP: Enter the IP address of the primary Windows Internet Naming Service (WINS) server.

WINS Secondary Server IP: Enter the IP address of the secondary WINS server.

2. Click Apply to save your changes.