Disabling Microsoft L2TP for IPSec

最新推荐文章于 2024-12-28 07:49:24 发布

gotonet

最新推荐文章于 2024-12-28 07:49:24 发布

阅读量1k

点赞数

CC 4.0 BY-SA版权

分类专栏： fortinet 文章标签： microsoft encryption windows documentation authentication menu

本文链接：https://blog.youkuaiyun.com/gotonet/article/details/1355782

fortinet 专栏收录该内容

35 篇文章

订阅专栏

本文介绍如何通过编辑Windows 2000注册表来禁用IPSec及证书元素，以便使用Microsoft L2TP连接到FortiGate设备。此操作适用于需要配置旧版L2TP MPPE加密而非IPSec的情况。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

FortiGate units support L2TP with Microsoft Point-to-Point Encryption (MPPE) encryption only. Later implementations of Microsoft L2TP for Windows use IPSec and require certificates for authentication and encryption. If you want to use Microsoft L2TP with IPSec to connect to a FortiGate unit, the IPSec and certificate elements must be disabled on the remote client.

You can disable the IPSec and certificate elements by editing the Windows 2000 Registry as described in the following steps. See the Microsoft documentation for more information about editing the Windows Registry.

On the Windows Start menu, select Run.
In the Open field, type regedit.
Select OK.
In the Registry Editor, open the following folder:
HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Rasman/Parameters
In the right pane, locate the ProhibitIPSec registry value and verify that the Data column for the entry contains a value of 0x00000001 (1). If the value for ProhibitIPSec is 0x00000000:
- Right-click the ProhibitIPSec registry value and select Modify.
- In the Value data field, type 1.
- Select OK.
Exit the Registry Editor to save any changes