|
Home > Configuration—Network Policies > Router Settings > VPN Services > Configure Layer 3 VPN Services
Logo

Configure Layer 3 VPN Services

Create a Layer 3 VPN Services profile that makes use of all the default settings, choose the VPN gateway and define its external IP address, and then configure the default routing policy and policy exceptions.

This task is part of the network policy configuration workflow. Use this task to configure Layer 3 IPsec VPNs.

  1. Go to Configure > Network Policies.
  2. Select an existing network policy, and then select Edit, or select Add.
  3. After you save the Policy Details, select 5 Branch Routing.
  4. From the Router Settings menu, select VPN Service.
  5. Toggle Enable VPN Service to ON.
  6. Select ADD to add a new VPN Service, or SELECT to specify an existing VPN service.
  7. Configure the VPN Services Settings.
  8. Select GENERATE to create client credentials for servers and clients.

    For more information, see Server-Client Credentials.

  9. For the remaining optional settings see:
  10. Select SAVE.
After you apply a VPN gateway, ExtremeCloud IQ automatically displays the WAN and LAN IP addresses, and indicates whether the VPN gateway uses dynamic routing protocols to learn routes from routing peers on its local network.

Copyright © 2026 Extreme Networks. All rights reserved. Published February 17, 2026.