Layer 2 Tunnelling Protocol is a layer 7 networking protocol which provides an unsecure layer 2 tunnel. It runs on top of UDP, and is commonly used to carry PPP sessions. Security is usually provided with the addition of IPsec.

learn more… | top users | synonyms

0
votes
1answer
2k views

Cannot connect to my L2TP IPSec VPN

I am trying to get my VPN (L2TP IPSec PSK) to work. I have a Synology NAS where I have setup everything as it says on the Synology support page. In my Asus RT-N66U router I have opened UDP ports ...
0
votes
1answer
6k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In ...
6
votes
1answer
5k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
1
vote
1answer
47 views

What configuration issue is preventing Samba Network Shares from being visible over VPN?

I set up a VPN using L2TP and IPSEC (with LibreSwan) using this script: https://github.com/hwdsl2/setup-ipsec-vpn The only change I had to make was to change the instances of 'eth0' to the new format ...
3
votes
2answers
2k views

Using Ubuntu Karmic as an L2TP Client for VPN

I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working. The only details I have are the remote IP address, username & password, and a shared secret string; ...
1
vote
1answer
1k views

xl2tpd: Provide L2TP/IPsec VPN connectivity to an entire subnet without using a default route

I've set up an L2TP/IPsec VPN using OpenSwan and xl2tpd using the "nodefaultroute" ppp option. The server's virtual IP address is set to 10.10.31.1 and it allocates addresses in the range ...
1
vote
1answer
4k views

L2TP over IPSec VPN (OpenSwan, CentOS 6) unable to connect via iPhone (iOS 5.1) and Android (JellyBean)

I have successfully installed L2TP over IPsec VPN (PSK) using OpenSwan 2.6.38 running on CentOS. Connect DOES WORK perfectly from Windows 8. But doesn't work AT ALL from iPhone 4 (ios 5.1) or ...
0
votes
1answer
1k views

Can't connect VPN tunnel when other on same NAT-router is connected

We have recently changed our FW to a ZyWall 310 with drastically improved throughput over the old one. However there is a new problem that occurred, we have several L2TP/IPSec clients that connect to ...
0
votes
0answers
11 views

Is IPSec + L2TP doable on Ubuntu 14.04?

We just got a new firewall, and our old PPTP VPN has been replaced with a new IPSec + L2TP VPN. Setting up VPN connections for Windows + Mac users is a breeze. Getting it to work on Ubuntu is hard (at ...
0
votes
0answers
31 views

How to view l2tp/ipsec clients

I have an l2tp/ipsec server. How I can list who is connected to server? I used to use last for ppp users using pptp. but that not working. I tired who too, but no luck. The only option I have is ...
0
votes
0answers
49 views

How to change IP-address of the Synology NAS-station when using VPN-connection?

I have set up VPN-connection (L2TP/IPSec) at our office lately. The main thing is that our employees could access Synology NAS-station from their home. VPN-connection works great, but the problem is ...
1
vote
1answer
18 views

Hosts with identical local IP's in separate environments disconnecting each other on connection to L2TP VPN

Host A, located in Virginia, connecting to TZ-215 L2TP VPN (WAN GroupVPN) server. Local IP: 192.168.1.2. Connecting using a unique local account setup on TZ-215. Host B, located in Pennsylvania, ...
0
votes
1answer
85 views

Connect a Zywall USG200 to Windows Server 2012R2 based IPSEC/l2tp VPN

I'm trying to build a network configuration where clients can connect to some servers in a VPN via a Zywall USG 200 router/firewall. the network schema The architecture is composed by a windows ...
0
votes
2answers
101 views

How to configure Fortigate 60D as L2PT/IPSEC client

I have a firewall Fortigate 60D and I need to create a tunnel to a L2TP/IPSEC server, so the firewall has to act as a client. Is it possible? I configured the L2TP/IPSEC server on a Linux Debian ...
-3
votes
1answer
48 views

How to proxy a l2tp server? [closed]

My topologic is : Host1(MyL2TP Client) <=========> Host2 (L2TP Server, SOCKS5 Proxy Client) <==========> Host3(SOCKS5 Proxy Server) <======> Internet Host2 is ubuntu14.04, how ...
0
votes
0answers
23 views

VPN Server Disconnecting Hosts With Same LAN IP

When two hosts with the same local IP (e.g. 192.168.1.2) connect to the sonicwall L2TP VPN from behind two entirely separate gateways, one of the hosts gets bounced. I searched around and I think this ...
1
vote
2answers
458 views

How to deny connections to xl2tp without ipsec encryption?

I try to setup l2tp+ipsec server for my mobile use and my home router use. So I made some setup and checked it works fine from android device. I see encryption on ipsec --status. My system is CentOS ...
3
votes
1answer
79 views

Can't Ping other local ips on l2tp vpn connection, getting: ping: sendmsg: No such device

I have setup an l2tp client using xl2tp to connect to an l2tp vpn server. The server connection requires that the connection be setup WITHOUT ipsec. So I have set up a basic xl2tp connection. The ...
-1
votes
1answer
284 views

What are the ports needed for L2TP VPN on Mac OS X Server 5.0.15?

I'm configuring a Mac as a server with a VPN service. So, I opened the ports listed as used by VPN in Apple documentation: UDP 500 -> 500 (+ESP and AH) UDP 4500 -> 4500 Any UDP -> 1701 (I got to ...
0
votes
1answer
27 views

RSTP over tunnel?

tl;dr: Is it possible to run RSTP over l2tp or MPLS? We have leased one gig capacity from a service provider's network, over which we sent a udp multicast traffic. The provider gives us drop at our ...
0
votes
0answers
407 views

L2TP + IPSec pfSense: can ping, no access

I am in process of setting up a L2TP + IPSec VPN (site to client) server based on pfSense. While being connected to the VPN, I am able to ping any of the resources (e.g google.com, as well as anybody ...
0
votes
0answers
69 views

Change IPsec source port on windows. (Multiple clients behind NAT use same source port)

I have the exact same problem as this question, but I can't upvote it/comment on it: Multiple Windows clients behind a same NAT gateway cannot connect to L2TP/IPsec VPN server at the same time How ...
2
votes
1answer
3k views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
0
votes
1answer
3k views

How to setup L2TP IPsec VPN server on Windows Server 2008 R2?

The Windows 2008 R2 (SBS) machine was earlier setup to run a PPTP VPN server. Due to security concerns I do want to replace the PPTP by L2TP/IPsec VPN server. The server is behind a NAT router where ...
0
votes
0answers
87 views

How to set up libreswan with PAM and Google-authenticator for Mac Clients

I can't seem to get xauthby=pam working. I recompiled libreswan with PAM support. The VPN server does work when I set it up to use chap so I know the server is largely set up right. I'm following ...
0
votes
1answer
127 views

SonicWall - connecting to L2TP VPN from DMZ

I have a company network running behind a SonicWall NSA 220. We have a wired internal network with workstations and file servers, but have all WLAN on a DMZ to allow guests to use it without access to ...
0
votes
0answers
157 views

ZyWall USG20 L2TP/IPsec VPN Active directory auth

I have issues with connecting to my VPN. If I sign in as local user (the ones created in objects of zywall) it is fine. But as soon as I try to connect as domain user I get error message "The ...
0
votes
1answer
39 views

How do I allow outgoing connections to port 80 on a Remote Access VPN?

I have setup a simple L2TP VPN by using the Remote Access role. This works fine, however outgoing connections to port 80 don't work. I can connect to the shares and RDP, however browsing the web is ...
0
votes
1answer
253 views

L2TP VPN without certificates between Windows XP and ZyWALL USG 200

I'm trying to configure a ZyWALL USG 200 firewall to let Windows XP remote clients (dynamic IP address) to connect to the workplace network with a L2TP VPN. I don't want to use certificates, a common ...
2
votes
1answer
577 views

L2TP VPN Connection on Debian Squeeze

I need to make an L2TP VPN connection from a Debian Squeeze server. What I have is: The server IP address Shared Key My username and password Just using these 3 parameteres I can establish the ...
0
votes
1answer
547 views

How to setup VPN Client in Microsoft 08 R2

We need to get a VPN connection setup with a client. I am mostly a software guy and networking is beyond my scope. We have been provided the peer IP address and the NAT of the local machine we will be ...
1
vote
0answers
61 views

udp 300 - acl drop - flow is denied

I am facing below issue after connecting l2tp with Cisco asa. Split tunnel is configured. It drops dhcp packets. Here is capture and config. 29: 22:39:38.733909 192.168.255.1.68 > ...
1
vote
0answers
125 views

Can't connect multiple user to L2TP VPN server (Error 720)

I have a VPS running windows server 2008 r2 standard. I configured Routing And Remote Access and NAT , i created multiple users with "Network Access Permission: Allow Access" . What i have done in ...
1
vote
1answer
22k views

I can connect, but cannot ping/route to remote VPN computers

Setup: L2TP VPN Server on a Windows Server 2008 machine which is behind a router, which is behind a modem/router. Modem/Router (IP: 192.168.2.1, Subnet: 255.255.255.0, DHCP serves 192.168.2.2 to ...
2
votes
2answers
13k views

Error connecting to Sonicwall L2TP VPN from iPad/iPhone

A client has a Sonicwall Pro 2040 running SonicOS 3.0, and they'd like to be able to use the L2TP VPN client from their iPads to connect to internal services (Citrix, etc). I've enabled the L2TP VPN ...
1
vote
1answer
538 views

Setting up site-to-site IPsec in bridged mode

I'd like to set up site-to-site IPsec in bridged mode: that is, where the hosts in each site don't need to be modified to use the IPsec gateway, but the IPsec gateway acts as a pseudowire. My plan to ...
0
votes
0answers
34 views

How does IPSec right=%any setup the SA?

I've seen lots of examples where each gateway in an IPSec is configured with right=%any. I'm perplexed how these gateways find the IP to connect to (assuming both gateways are set up that way). The ...
1
vote
1answer
858 views

l2tp/pptp + freeradius (accounting information only gets updated on disconnect)

I have a basic PPTP/L2TP setup that uses a remote freeradius server with mysql. Issue is that when a user gets connected to the vpn and as long as the user stays connected (could be hours), no ...
0
votes
0answers
223 views

L2TP\IPSec PSK server in Windows Server 2012 R2 not working

Im trying to get Windows Server 2012 R2 to work as a L2TP\IPSec PSK server and I feel that Im doing everything correctly but it seems that either it does not authenticate or there is something wrong ...
0
votes
2answers
793 views

Why does VNC viewer on Mac Book Pro report RFB protocol error when connecting to AWS over L2TP?

There is a small group of us working on Amazon Web Services (AWS), we use mac books as our desktop machines and VNC into servers running on AWS. The problem started when we upgraded our VPN from PPTP ...
1
vote
0answers
25 views

Routing is disabled for LAN users while choosing all-net for IPSec tunnel

I have VPN with L2TP/IPSec server and tunnel configured. When I choose all-nets 0.0.0.0/0 to allow connection from any computer in the world, all LAN users with subnet 10.0.0.0/8 are disconnected from ...
-2
votes
2answers
173 views

Networking VPN expert out there? Should Remote VPN “Client” be pingable/reachable FROM the VPN server?

I've setup VPN connections with different servers today and all worked, in one direction, from VPN client TO VPN SERVER. BUT I could NOT whatever I tried access ports/services on my 'connected' VPN ...
0
votes
1answer
4k views

How can I configure IPSec on Windows 2012 R2 to use Pre Shared Key compatible with Android phones?

Our company has to comply with the mandate that all mobile phones use L2TP or IPSec VPNs when using untrusted Wifi or GPRS connections... namely to protect from MITM attacks. Were also interested in ...
2
votes
1answer
327 views

VPN for Video stream

I work at a digital TV broadcast company (cable), we have 2 head ends, one in the US and one in the Caribbean, we currently connect both sites with a cisco L2TPv3 pseudowire VPN between both sites, ...
0
votes
1answer
548 views

Clients cannot connect to L2TP server on Ubuntu 12.04 & 14.04 LTS

I am trying to set up a L2TP/IPSec server on AWS with instance running Ubuntu 14.04LTS. I followed the instructions that I found here : https://raymii.org/s/tags/vpn.html. I tried to use 12.04LTS ...
1
vote
0answers
232 views

Encrypted layer 2 tunnel over Internet for a contiguous subnet

I have two offices that are connected at layer 2 with fiber on a primary link with contiguous subnets on each end(it won't change anytime soon). It works just fine, I have full end-to-end layer 2 ...
1
vote
0answers
44 views

L2TP loadbalancing

Due to need to scale, I'm setting a new l2tp server using l2tpns and trying to balance the load between my two l2tp servers using LVS LVS configuration ipvsadm -A -u 192.168.10.10:1701 -s sh ipvsadm ...
1
vote
1answer
519 views

cisco ASA 5505 l2tp vpn

I have a problem with cisco asa 5505 vpn configuration. I set l2tp for windows clients. I can connect to vpn but: when i have "use default gateway on remote network" on NIC enabled i have access to ...
0
votes
0answers
463 views

How to debug IPsec L2TP authentication failure (Ubuntu StrongSwan client to Windows Server 2012)

I'm trying to connect via IPsec L2TP to a Windows Server 2012 server. Both the clients and the host are behind a NAT. I can connect from a Windows 7 machine without any problems, but when trying to ...
0
votes
1answer
346 views

FreeBSD L2TP VPN connection error

I have a L2TP/IPsec VPN server on FreeBSD 10 set as this article. Everything works fine except clients cannot receive packets from outside. Here is the tcpdump result when a connected client tries to ...