L3VPN is used to define, configure, and manage Intranet SSL VPN resources using multiple IP protocols and can access using TCP/UDP/ICMP protocols at the same time.
- Click Add > L3VPN App to enter the Edit L3VPN page, as shown in the figure below.
- Configure the Basic Attributes of the LVPN resource. The following are the basic attributes:
Name/Description: Indicate the name and description of the L3VPN resource. This name may be seen on the Resources page after the user logs in to the SSL VPN.
Type: Indicate the type of the L3VPN. Some common types are built into the Sangfor device. This selection determines the port number entered in the Port field automatically. If the L3VPN is not any of the built-in types, select Other and configure the port manually.
Address: Indicate the address of the LVPN resource. Click the Add icon to enter the Add/Edit Resource Address page. To add one address entry (IP address, domain name, or IP range), select the Add Address tab. To add multiple entries of addresses, select the Add Multiple Addresses tab, as shown in the figures below:
Port indicates the port used by this L3VPN to provide services. For built-in types of L3VPN, this port is predefined. For Other types of L3VPN, enter the corresponding port number.
Program Path: Indicate the path of the client software program that may be used by the C/S (client/server) application.
Added To: Indicate the resource group to which this resource is added. By default, the selected resource group is the Default group (to configure the resource group, refer to the Adding/Editing Resource Group section).
Enable resource: To set the availability of this resource.
Visible for user: Selecting this option will make the resource visible to connecting users on the Resources page. Invisibility here only means that the resource is not seen on the Resources page. It is still accessible to the user.
URL Access Control: URL Access Control for HTTP resources:
Enable the URL Access Control function.
Choose the action for the access control, either allow or deny.
Add URL.
Click Instructions to display the URL access control instructions as the figure below: