遇寻笔记

Windows系统默认不支持连接在防火墙NAT后的L2TP/IPSec协议VPN，但是可以通过修改注册表解决。

修改方法如下：

1. 定位注册表 ：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
2. 新建DWORD (32位)值，名称：AssumeUDPEncapsulationContextOnSendRule
3. 值填 2
4. 重启系统

---

In order to disable IPSec on Windows 7/Vista

1. Click Start, then in search box type: run ENTER
2. In the Run dialog type: regedit ENTER
3. In Registry Editor: Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasman\Parameters
4. On the Edit menu, click New>DWORD
5. As the name of the new key enter: ProhibitIpSec
6. Double click the key to edit the value.
7. In the Value data field, enter: 1
8. Quit Registry Editor, and then restart the computer.

---

当VPN启动后，还需要修改两项与路由相关的配置