Layer 2 Tunnelling Protocol is a layer 7 networking protocol which provides an unsecure layer 2 tunnel. It runs on top of UDP, and is commonly used to carry PPP sessions. Security is usually provided with the addition of IPsec.

learn more… | top users | synonyms

0
votes
2answers
15 views

How to configure Fortigate 60D as L2PT/IPSEC client

I have a firewall Fortigate 60D and I need to create a tunnel to a L2TP/IPSEC server, so the firewall has to act as a client. Is it possible? I configured the L2TP/IPSEC server on a Linux Debian ...
-3
votes
1answer
24 views

How to proxy a l2tp server? [closed]

My topologic is : Host1(MyL2TP Client) <=========> Host2 (L2TP Server, SOCKS5 Proxy Client) <==========> Host3(SOCKS5 Proxy Server) <======> Internet Host2 is ubuntu14.04, how ...
0
votes
0answers
16 views

VPN Server Disconnecting Hosts With Same LAN IP

When two hosts with the same local IP (e.g. 192.168.1.2) connect to the sonicwall L2TP VPN from behind two entirely separate gateways, one of the hosts gets bounced. I searched around and I think this ...
-2
votes
0answers
20 views

VPN via DNS to digital ocean VM

I'm hoping someone can help with some advice. I'm setting up some VMs on Digital Ocean to act as VPN jump boxes. I've configured my server to be accessible using VPN. I've tested this, and it works ...
3
votes
1answer
58 views

Can't Ping other local ips on l2tp vpn connection, getting: ping: sendmsg: No such device

I have setup an l2tp client using xl2tp to connect to an l2tp vpn server. The server connection requires that the connection be setup WITHOUT ipsec. So I have set up a basic xl2tp connection. The ...
-1
votes
1answer
79 views

What are the ports needed for L2TP VPN on Mac OS X Server 5.0.15?

I'm configuring a Mac as a server with a VPN service. So, I opened the ports listed as used by VPN in Apple documentation: UDP 500 -> 500 (+ESP and AH) UDP 4500 -> 4500 Any UDP -> 1701 (I got to ...
0
votes
1answer
17 views

RSTP over tunnel?

tl;dr: Is it possible to run RSTP over l2tp or MPLS? We have leased one gig capacity from a service provider's network, over which we sent a udp multicast traffic. The provider gives us drop at our ...
0
votes
0answers
30 views

Change IPsec source port on windows. (Multiple clients behind NAT use same source port)

I have the exact same problem as this question, but I can't upvote it/comment on it: Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time How ...
0
votes
0answers
39 views

How to set up libreswan with PAM and Google-authenticator for Mac Clients

I can't seem to get xauthby=pam working. I recompiled libreswan with PAM support. The VPN server does work when I set it up to use chap so I know the server is largely set up right. I'm following ...
0
votes
0answers
75 views

ZyWall USG20 L2TP/IPsec VPN Active directory auth

I have issues with connecting to my VPN. If I sign in as local user (the ones created in objects of zywall) it is fine. But as soon as I try to connect as domain user I get error message "The ...
0
votes
1answer
29 views

How do I allow outgoing connections to port 80 on a Remote Access VPN?

I have setup a simple L2TP VPN by using the Remote Access role. This works fine, however outgoing connections to port 80 don't work. I can connect to the shares and RDP, however browsing the web is ...
0
votes
1answer
117 views

L2TP VPN without certificates between Windows XP and ZyWALL USG 200

I'm trying to configure a ZyWALL USG 200 firewall to let Windows XP remote clients (dynamic IP address) to connect to the workplace network with a L2TP VPN. I don't want to use certificates, a common ...
0
votes
1answer
2k views

How to setup L2TP IPsec VPN server on Windows Server 2008 R2?

The Windows 2008 R2 (SBS) machine was earlier setup to run a PPTP VPN server. Due to security concerns I do want to replace the PPTP by L2TP/IPsec VPN server. The server is behind a NAT router where ...
1
vote
0answers
55 views

udp 300 - acl drop - flow is denied

I am facing below issue after connecting l2tp with Cisco asa. Split tunnel is configured. It drops dhcp packets. Here is capture and config. 29: 22:39:38.733909 192.168.255.1.68 > ...
1
vote
0answers
90 views

Can't connect multiple user to L2TP VPN server (Error 720)

I have a VPS running windows server 2008 r2 standard. I configured Routing And Remote Access and NAT , i created multiple users with "Network Access Permission: Allow Access" . What i have done in ...
0
votes
0answers
333 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
1answer
337 views

Setting up site-to-site IPsec in bridged mode

I'd like to set up site-to-site IPsec in bridged mode: that is, where the hosts in each site don't need to be modified to use the IPsec gateway, but the IPsec gateway acts as a pseudowire. My plan to ...
0
votes
0answers
26 views

How does IPSec right=%any setup the SA?

I've seen lots of examples where each gateway in an IPSec is configured with right=%any. I'm perplexed how these gateways find the IP to connect to (assuming both gateways are set up that way). The ...
0
votes
0answers
197 views

L2TP\IPSec PSK server in Windows Server 2012 R2 not working

Im trying to get Windows Server 2012 R2 to work as a L2TP\IPSec PSK server and I feel that Im doing everything correctly but it seems that either it does not authenticate or there is something wrong ...
0
votes
2answers
386 views

Why does VNC viewer on Mac Book Pro report RFB protocol error when connecting to AWS over L2TP?

There is a small group of us working on Amazon Web Services (AWS), we use mac books as our desktop machines and VNC into servers running on AWS. The problem started when we upgraded our VPN from PPTP ...
1
vote
0answers
24 views

Routing is disabled for LAN users while choosing all-net for IPSec tunnel

I have VPN with L2TP/IPSec server and tunnel configured. When I choose all-nets 0.0.0.0/0 to allow connection from any computer in the world, all LAN users with subnet 10.0.0.0/8 are disconnected from ...
-2
votes
2answers
158 views

Networking VPN expert out there? Should Remote VPN “Client” be pingable/reachable FROM the VPN server?

I've setup VPN connections with different servers today and all worked, in one direction, from VPN client TO VPN SERVER. BUT I could NOT whatever I tried access ports/services on my 'connected' VPN ...
0
votes
1answer
103 views

SonicWall - connecting to L2TP VPN from DMZ

I have a company network running behind a SonicWall NSA 220. We have a wired internal network with workstations and file servers, but have all WLAN on a DMZ to allow guests to use it without access to ...
2
votes
1answer
257 views

VPN for Video stream

I work at a digital TV broadcast company (cable), we have 2 head ends, one in the US and one in the Caribbean, we currently connect both sites with a cisco L2TPv3 pseudowire VPN between both sites, ...
0
votes
0answers
74 views

L2TP daemon server multiple IP

I have VPS with 3 public IP - Debian 7. I would like to have 3 L2TP damemons (one ip each) NATing traffic to each ip. Something like this l2tp_multiple_public_ip_diagram. I have set up l2tp daemon for ...
0
votes
0answers
119 views

Tunneling a PPTP VPN connection through a L2TP VPN connection

My company recently moved to a serviced office space : they provide the desks, power and internet. My company has a VPN to connect to the main head quarters that uses PPTP to connect. In the new ...
1
vote
0answers
201 views

Encrypted layer 2 tunnel over Internet for a contiguous subnet

I have two offices that are connected at layer 2 with fiber on a primary link with contiguous subnets on each end(it won't change anytime soon). It works just fine, I have full end-to-end layer 2 ...
1
vote
0answers
43 views

L2TP loadbalancing

Due to need to scale, I'm setting a new l2tp server using l2tpns and trying to balance the load between my two l2tp servers using LVS LVS configuration ipvsadm -A -u 192.168.10.10:1701 -s sh ipvsadm ...
1
vote
2answers
395 views

How to deny connections to xl2tp without ipsec encryption?

I try to setup l2tp+ipsec server for my mobile use and my home router use. So I made some setup and checked it works fine from android device. I see encryption on ipsec --status. My system is CentOS ...
0
votes
1answer
5k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In ...
1
vote
1answer
457 views

cisco ASA 5505 l2tp vpn

I have a problem with cisco asa 5505 vpn configuration. I set l2tp for windows clients. I can connect to vpn but: when i have "use default gateway on remote network" on NIC enabled i have access to ...
0
votes
0answers
426 views

How to debug IPsec L2TP authentication failure (Ubuntu StrongSwan client to Windows Server 2012)

I'm trying to connect via IPsec L2TP to a Windows Server 2012 server. Both the clients and the host are behind a NAT. I can connect from a Windows 7 machine without any problems, but when trying to ...
0
votes
1answer
2k views

Cannot connect to my L2TP IPSec VPN

I am trying to get my VPN (L2TP IPSec PSK) to work. I have a Synology NAS where I have setup everything as it says on the Synology support page. In my Asus RT-N66U router I have opened UDP ports ...
0
votes
1answer
488 views

Clients cannot connect to L2TP server on Ubuntu 12.04 & 14.04 LTS

I am trying to set up a L2TP/IPSec server on AWS with instance running Ubuntu 14.04LTS. I followed the instructions that I found here : https://raymii.org/s/tags/vpn.html. I tried to use 12.04LTS ...
0
votes
1answer
318 views

FreeBSD L2TP VPN connection error

I have a L2TP/IPsec VPN server on FreeBSD 10 set as this article. Everything works fine except clients cannot receive packets from outside. Here is the tcpdump result when a connected client tries to ...
1
vote
0answers
244 views

Sonicwall L2TP Server is using a “phantom” internal DHCP server

Following a few articles on options 121 and 249, I'd like to push out routes to the L2TP VPN clients using the internal DHCP server on the Sonicwall. However, the Sonicwall seems to be using a ...
0
votes
1answer
2k views

Softether vpn ufw firewall config - is it correct?

I've correctly installed and configured Softether on my Ubuntu 14 x64 VPS in local bridge mode with a virtual TAP interface. What I have now is a fully functioning L2TP/IPSEC server with two network ...
0
votes
2answers
330 views

NAT Masquerade to a L2TP/IPSec connection

I'm trying to create two networks (using a debian server) : The first one is intended to pass packets in a normal way (to my ISP). The second one is intended to pass packets via a L2TP/IPSec VPN ...
0
votes
1answer
310 views

Phones & tablets cannot connect to Windows Server 2008 RRAS L2TP VPN server

I had installed RRAS in the server running Windows Server 2008 Standard. It's configured as a L2TP VPN server. The Windows and Mac OS X PCs can connect to the server without problem but the android ...
0
votes
0answers
863 views

Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time

I have set up a L2TP/IPsec VPN server on a cloud VM (with a public IP address) running CentOS 6.5 (kernel: 2.6.32) with openswan/xl2tpd (openswan: 2.6.37, xl2tpd: 1.3.6). However, if multiple Windows ...
0
votes
1answer
1k views

Can't connect VPN tunnel when other on same NAT-router is connected

We have recently changed our FW to a ZyWall 310 with drastically improved throughput over the old one. However there is a new problem that occurred, we have several L2TP/IPSec clients that connect to ...
0
votes
1answer
3k views

How can I configure IPSec on Windows 2012 R2 to use Pre Shared Key compatible with Android phones?

Our company has to comply with the mandate that all mobile phones use L2TP or IPSec VPNs when using untrusted Wifi or GPRS connections... namely to protect from MITM attacks. Were also interested in ...
2
votes
1answer
3k views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
0
votes
0answers
276 views

L2TP within local network not working

i can't connect to my vpn server when i'm in the same network and use the external ip address to connect. It seems like the server doesn't receive any traffic. When i'm outside the network OR use the ...
0
votes
1answer
2k views

Cannot connect to VPN on Server 2012

We run a small business and have a server that runs our VPN on Windows Server 2012. Our VPN was working fine until we restarted our router and it seems that restart procedure broke the VPN. We are ...
0
votes
0answers
1k views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
2
votes
1answer
524 views

L2TP VPN Connection on Debian Squeeze

I need to make an L2TP VPN connection from a Debian Squeeze server. What I have is: The server IP address Shared Key My username and password Just using these 3 parameteres I can establish the ...
4
votes
2answers
6k views

Is it possible for L2TP VPN to do auto route configuration for client during connected?

We've setup a L2TP VPN server with this tutorial, everything works like a charm. The only issue is We don't want client to route all traffic using this VPN, only a particular subnet, e.g. ...
0
votes
0answers
788 views

Site to site IPSec VPN between Server 2012 and USG 50

I am looking to setup an IPSec VPN server in our organisation using a Windows server 2012 machine with remote access and routing installed. I would then like to perform a site to site IPSec VPN ...
0
votes
0answers
296 views

OS X Server ignoring static VPN IP request

I've just enabled the VPN service on OS X Server, everything is working fine however we are facing one issue. All of our clients (about 30 iMac's) are connecting to the VPN with a static IP however OS ...