No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


CLI-based Configuration Guide - VPN

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010

This document describes VPN features on the device and provides configuration procedures and configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
What Can I Do If a PC Running the Windows 7 or XP Operating System Fails to Establish an L2TP over IPSec Tunnel with the Device?

What Can I Do If a PC Running the Windows 7 or XP Operating System Fails to Establish an L2TP over IPSec Tunnel with the Device?

The possible cause for an L2TP over IPSec tunnel establishment failure between a PC running the Windows 7 or XP operating system and the device is that the system registry is not modified.

The following describes how to modify the registry of the Windows 7 operating system so as not to use digital certificate authentication.


The operations in the 64-bit Windows 7 operating system are the same as those in the 32-bit operating system.

  1. Choose Start > cmd and enter regedit to open the registry.
  2. Choose HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RasMan\Parameters in the left, right-click a blank area in the right, and choose New > DWORD (32–bit) Value to generate the New Value #1 file.
  3. Right-click New Value #1 and choose Rename to rename the file as ProhibitIpSec.
  4. Right-click the ProhibitIpSec file and choose Modify.
  5. In the displayed Edit DWORD (32-bit) Value dialog box, set Value data to 1 and select Hexadecimal under Base, as shown in Figure 1-26.
  6. Restart the PC to make the configuration take effect.
Figure 1-26  Registry Editor

Updated: 2019-08-07

Document ID: EDOC1100033725

Views: 153214

Downloads: 369

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next