


Tip: Cisco ASA devices can be set up to support L2TP over IPSec. The L2TP layer requires a username and password.

The IPsec layer will either use a pre-shared key (PSK) or user certificates to set up the secure tunnel. Your Chromebook has built-in support for VPNs that use L2TP over IPsec. If you’re not sure, leave these fields empty. Local identity and Remote identity: If your VPN provider has instructions for these fields, fill them in here.If you don't have any certificates installed, you'll receive an error message. From the list, select your installed user VPN certificate. User certificate: For user certificate connections only.The server's certificate gets checked to make sure that it was signed by the correct certificate authority (CA). From the list, select your installed certificate authority certificate. Server CA certificate: For user certificate connections and EAP connections only.

In a typical set-up, everyone who connects to the same VPN server uses the same PSK. This key isn't your personal password, but a passphrase or key used in the IPsec configuration.
