Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=remote-access-VPN-L2TP

L2TP

The Layer Two Tunneling Protocol (L2TP) enables you to provide connections to your network through private tunnels over the internet. The firewall supports L2TP as defined in RFC 3931.

Note

To allow incoming L2TP requests, do as follows:

  1. Turn on L2TP. Go to Remote access VPN > L2TP. Click L2TP global settings, then click Enable L2TP, and specify the settings.
  2. Click Device access or go to Administration > Device access and turn on IPsec for the WAN zone.
  • To see the L2TP logs, click Logs.
  • To turn a connection on, click the Active status indicator.
  • To connect, click the Connection status indicator.
Active Connection Description
Button showing active status. Icon showing connections aren't established. Connection is active, but tunnel isn't established.
Button showing active status. Icon showing connections are established. Connection is active, and tunnels are established.
Button showing active status. Icon showing at least one connection's not established. Connection is active, but at least one tunnel isn't established. When you configure more than one local or remote subnet, Sophos Firewall establishes a tunnel for each local and remote subnet pair.
Button showing inactive status. Icon showing connections aren't established. Connection is inactive.