set vpn remote-access default-access-to-lan

In the R81.10.X releases, this command is available starting from the R81.10.00 version.

Description

Configures settings for Remote Access VPN.

Syntax

set vpn remote-access [ default-access-to-lan <default-access-to-lan> ] [ mode <mode> ] [ track <track> ] [ mobile-client <mobile-client> ] [ sslvpn-client <sslvpn-client> ] [ l2tp-vpn-client <l2tp-vpn-client> ] [ l2tp-pre-shared-key <l2tp-pre-shared-key> ]

Parameters

Parameter

Description

default-access-to-lan

Allow traffic from Remote Access clients (by default)

Options: block, accept

l2tp-pre-shared-key

L2TP Pre-Shared Key

A string of alphanumeric characters without space between them:

  • a-z (lower-case letters)

  • A-Z (upper-case letters)

  • 0-9 (digits)

l2tp-vpn-client

Enable Remote Access VPN clients to connect via native VPN client (L2TP)

Type: Boolean (true/false)

mobile-client

Enable Remote Access VPN mobile clients to connect via Check Point Mobile VPN client

Type: Boolean (true/false)

mode

Enable Remote Access VPN

Type: Boolean (true/false)

sslvpn-client

Enable Remote Access VPN clients to connect via SSL VPN

Type: Boolean (true/false)

track

Log traffic from Remote Access clients (by default)

Options: none, log

Example Command

set vpn remote-access default-access-to-lan block mode true track none mobile-client true sslvpn-client true l2tp-vpn-client true l2tp-pre-shared-key MySharedKey