Chromebook with Firebox L2TP VPN Integration Guide

Deployment Overview

WatchGuard is provides provide integration instruction to help our customer configure WatchGuard product to work with product create by other organization .If you need more information or technical support about how to configure a third – party product , see the documentation and support resource for that product .

This integration guide describes how to configure an L2TP VPN connection between a Chromebookand a Firebox.

Integration Summary

The hardware and software used to complete the steps outlined in this document include:

• Chromebook
  • Google Chrome OS Version 79.0.3945.86
• WatchGuard Firebox

Test Topology

Configure Your Firebox for Chromebook

1. connect to the Firebox at https://<Firebox IP address>:8080.
2. Log in with a user account that has administrator credentials.
3. selectauthentication > Servers.
   The authentication Servers page appears.
4. clickFirebox-DB.
   The Firebox user and Groups page appears.
5. In theFirebox Groups section, click add.
   The Firebox Group dialog box appears.
6. In theName text box, type a group name.In our example, we use the group name CB.

1. clickOK.
2. In theFirebox Users section, click add.
   The Firebox User dialog box is appears appear .
3. In theName text box, type a user name.In our example, we type the user name test.
4. In thePassphrase and Confirm text boxes is type , type the password .

1. At the bottom of the Firebox User dialog box, select the Firebox group you created.In our example, we select the group named CB.
2. Keep other default setting .

1. clickOK.
2. clickSave.
3. selectVPN > Mobile VPN.
   The Mobile VPN page appears.
4. In theL2TP section, click manually configure.
   The Mobile VPN with L2TP configuration page appears.
5. selectactivate mobile VPN with L2TP.Keep the default value for all settings.

1. selectthe authentication tab.
2. In theauthentication Servers section , selectFirebox-DB server.
3. In theuser and Groups section , selectthe group you created.In our example, we select the group named CB.
4. selectthe user you created.In our example, we select the user named test.

1. selectthe IPSec tab.
2. Make sure Enable IPSec is selected.
3. On the Phase 1 Settingstab, in the Credential Method section , selectUse Pre-Shared Key.
4. type a pre – shared key .
5. In thetransform setting section, click add.
   The transform setting dialog box appears.
6. From theauthentication drop-down list, select SHA2-256.
7. From theEncryption drop-down list, select AES (128-bit).
8. From theKey Group drop-down list, select Diffie – Hellman Group 15.Keep the default value for all other settings.

1. clickOK.The transform you added appears in the transform list.

1. clickSave.Keep the default value for all other settings.
2. clickSave.

configure Your chromebook

In our example, we assume that your Chromebookis already connected to the Firebox through a Wi-Fi connection.

1. At the bottom right of your desktop, select the time.
   configuration options is appear appear .

1. selectSettings .
   The Settings page is appears appear .

1. In theNetwork section, expand the add connection section.
2. Adjacent to add OpenVPN / L2TP, click the add icon +.
   The Join VPN network page is appears appear .
3. In theserver hostname text box is type , type the external ip address or host name of the Firebox .
4. In theService name text box is type , type a name for the VPN connection .
5. From theProvider type drop-down list, select L2TP/IPsec + pre-shared key.
6. In theUsername text box, type the user name.This is the Firebox-DB user you added on the Firebox.
7. In thePassword text box, type the password associated with the specified user name.
8. In thegroup name text box, type the group name.This is the Firebox-DB group you added on the Firebox.
9. In thePre-shared key text box, type the pre-shared key.This is the pre-shared key you configured on the Firebox.
10. selectthe save identity and password toggle .
11. To save the configuration, click connect.
    The VPN connection is added to the Network list.

Test the Integration

1. In theChromebooksettings, from the Network list, select VPN.
2. From theVPN list, select the arrow icon adjacent to the VPN connection you added.
3. clickconnect.If the connection is successful, the status changes to connected.