Chromebook with Firebox L2TP VPN Integration Guide

Deployment Overview

WatchGuard provides integration instructions to help our customers configure WatchGuard products to work with products created by other organizations. If you need more information or technical support about how to configure a third-party product, see the documentation and support resources for that product.

This integration guide describes how to configure an L2TP VPN connection between a Chromebook and a Firebox.

Test Topology

Configure Your Firebox for Chromebook

1. Connect to the Firebox at https://<Firebox IP address>:8080.
2. Log in with a user account that has administrator credentials.
3. Select Authentication > Servers.
   The Authentication Servers page appears.
4. Click Firebox-DB.
   The Firebox Users and Groups page appears.
5. In the Firebox Groups section, click Add.
   The Firebox Group dialog box appears.
6. In the Name text box, type a group name. In our example, we use the group name CB.

7. Click OK.
8. In the Firebox Users section, click Add.
   The Firebox User dialog box appears.
9. In the Name text box, type a user name. In our example, we type the user name test.
10. In the Passphrase and Confirm text boxes, type the password.

11. At the bottom of the Firebox User dialog box, select the Firebox group you created. In our example, we select the group named CB.
12. Keep other default settings.

13. Click OK.
14. Click Save.
15. Select VPN > Mobile VPN.
    The Mobile VPN page appears.
16. In the L2TP section, click Manually Configure.
    The Mobile VPN with L2TP configuration page appears.
17. Select Activate Mobile VPN with L2TP. Keep the default value for all settings.

18. Select the Authentication tab.
19. In the Authentication Servers section, select Firebox-DB server.
20. In the Users and Groups section, select the group you created. In our example, we select the group named CB.
21. Select the user you created. In our example, we select the user named test.

22. Select the IPSec tab.
23. Make sure Enable IPSec is selected.
24. On the Phase 1 Settingstab, in the Credential Method section, select Use Pre-Shared Key.
25. Type a pre-shared key.
26. In the Transform Settings section, click Add.
    The Transform Settings dialog box appears.
27. From the Authentication drop-down list, select SHA2-256.
28. From the Encryption drop-down list, select AES (128-bit).
29. From the Key Group drop-down list, select Diffie-Hellman Group 15. Keep the default value for all other settings.

30. Click OK.The transform you added appears in the transform list.

31. Click Save. Keep the default value for all other settings.
32. Click Save.

Configure Your Chromebook

In our example, we assume that your Chromebook is already connected to the Firebox through a Wi-Fi connection.

1. At the bottom right of your desktop, select the time.
   Configuration options appear.

2. Select Settings .
   The Settings page appears.

3. In the Network section, expand the Add Connection section.
4. Adjacent to Add OpenVPN / L2TP, click the add icon +.
   The Join VPN network page appears.
5. In the Server hostname text box, type the external IP address or host name of the Firebox.
6. In the Service name text box, type a name for the VPN connection.
7. From the Provider type drop-down list, select L2TP/IPsec + pre-shared key.
8. In the Username text box, type the user name. This is the Firebox-DB user you added on the Firebox.
9. In the Password text box, type the password associated with the specified user name.
10. In the Group name text box, type the group name. This is the Firebox-DB group you added on the Firebox.
11. In the Pre-shared key text box, type the pre-shared key. This is the pre-shared key you configured on the Firebox.
12. Select the Save identity and password toggle.
13. To save the configuration, click Connect.
    The VPN connection is added to the Network list.

Test the Integration

1. In the Chromebook settings, from the Network list, select VPN.
2. From the VPN list, select the arrow icon adjacent to the VPN connection you added.
3. Click Connect. If the connection is successful, the status changes to Connected.