How to let L2TP clients surf via USG

When configuring L2TP VPN, you often would like to pass the VPN clients traffic through the USG. This tutorial will show you how to do so in no-time!

Walkthrough Steps:

1. Access your device by entering it's IP address in the browser address line and login by using the device’s credential
2. Have an already working L2TP VPN connection set up:

USG/ATP/VPN - L2TP over IPSec VPN Configuration Handbook (On-Premise mode)

3. Navigate to Configuration > Network > Routing > Policy Route
4. Add a new route, where Incoming is the L2TP-Tunnel, the source is the L2TP_POOL and Next Hop is WAN1 with SNAT as outgoing-interface

You can now test if the traffic from L2TP to WAN is being accepted and forwarded.
If you also want to see this on the USG, you can set up Policy Rules for the direction and activate logging. You should then be able to see the traffic being forwarded.

KB-00048