Configure Layer 3 VPN Services

Create a Layer 3 VPN Services profile that makes use of all the default settings, choose the VPN gateway and define its external IP address, and then configure the default routing policy and policy exceptions.

This task is part of the network policy configuration workflow. Use this task to configure Layer 3 IPsec VPNs.

Go to Configure > Network Policies.
Select an existing network policy, and then select , or select .
After you save the Policy Details, select 5 Branch Routing.
From the Router Settings menu, select VPN Service.
Toggle Enable VPN Service to ON.
Select ADD to add a new VPN Service, or SELECT to specify an existing VPN service.
Configure the VPN Services Settings.
Select GENERATE to create client credentials for servers and clients.

For more information, see Server-Client Credentials.
For the remaining optional settings see:
- Configure IPsec VPN Authority Settings (Extreme Networks VPN Gateway only)
- Configure Advanced Server Options
- Configure Advanced Client Options
Select SAVE.

After you apply a VPN gateway, ExtremeCloud IQ automatically displays the WAN and LAN IP addresses, and indicates whether the VPN gateway uses dynamic routing protocols to learn routes from routing peers on its local network.