| 15.6 |  | Using PDM to Create Remote Access VPNs |
| 15.6.2 |  | The PIX Security Appliance for Windows 2000 clients |

| When Categories > Remote Access > L2TP/PPTP Client is selected, the Add Windows Client Settings window opens. The following bullets explain the fields in this window:

- Pool Info group box - Entering a name and range of IP addresses creates an address pool for the Windows 2000 clients.
- General Info group box - It is necessary to select either L2TP or PPTP.
  - If the clients make L2TP dial-in requests, PPP authentication protocol, PAP, CHAP, or MS-CHAP should be selected. The administrator should then specify the L2TP tunnel keep-alive hello timeout value in seconds. The default is 60 seconds if not specified. The value can be between ten and 300 seconds.
  - If the clients make PPTP dial-in requests, the number of session key bits used for Microsoft Point-to-Point Encryption (MPPE) negotiation should be specified as 40, 128, or auto. The administrator should then select the PPTP keep-alive echo timeout value in seconds. The PIX Security Appliance terminates a tunnel if an echo reply is not received within the timeout period that is specified by the administrator.
- DNS/WINS group box - The primary and secondary DNS and WINS server IP addresses are specified here. If this is set, the PIX Security Appliance sends this information to the Windows client.
- User Authentication group box - Selecting Local causes clients to be authenticated using local username and password entries. Selecting AAA specifies the AAA server group for user authentication.