Layer 2 Tunnelling Protocol is a layer 7 networking protocol which provides an unsecure layer 2 tunnel. It runs on top of UDP, and is commonly used to carry PPP sessions. Security is usually provided with the addition of IPsec.

learn more… | top users | synonyms

8
votes
1answer
254 views

If IPSec has its own IP tunnel support why do some add LT2P to the stack?

I understand that you can use IPSec to tunnel data securely. According to the Wikipedia page and a few other sources it can also tunnel IP packets and then route them through an interface. That would ...
6
votes
2answers
15k views

L2TP client for Ubuntu

It's easy enough to get a pptp client going on a Ubuntu 9.04 (Jaunty) desktop: sudo apt-get install network-manager-pptp However, I can't seem to find documentation find a corresponding L2TP ...
5
votes
1answer
4k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
4
votes
2answers
5k views

Is it possible for L2TP VPN to do auto route configuration for client during connected?

We've setup a L2TP VPN server with this tutorial, everything works like a charm. The only issue is We don't want client to route all traffic using this VPN, only a particular subnet, e.g. ...
4
votes
3answers
2k views

What is difference between L2TP and PPTP?

I need a high performance VPN server, who can tell me the difference between L2TP and PPTP ?
4
votes
1answer
3k views

VPN server not responding, no indications of blocked traffic

I have a Mac OS X Server (10.9) machine running a L2TP/IPSec VPN server. Configuration appears to be fine, and the hostname of both the server and the VPN is set to a DynDNS hostname. The server is ...
3
votes
2answers
6k views

Which ports for IPSEC/LT2P?

I have a firewall/router (not doing NAT). I've googled and seen conflicting answers. It seems UDP 500 is the common one. But the others are confusing. 1701, 4500. And some say I need to also ...
3
votes
2answers
12k views

Simple L2TP/IPsec server not working (openswan, xl2tpd, Ubuntu, Windows)

I configured openswan and xl2tpd on an Ubuntu 12.04 server (on EC2) by following various tutorials/documentation which seem to largely say the same things, but most recently this one. However, my ...
3
votes
1answer
2k views

Juniper SSG 5 VPN

I have a host who set up our Juniper SSG 5 VPN with Firmware version-6.2.0r5.0 I've been trying to set up VPN on it using this guide: http://kb.juniper.net/InfoCenter/index?page=content&id=KB4094 ...
3
votes
1answer
647 views

Linux L2TP Daemon Recommendation

I need to setup a tunnel between two points with no encryption. I know this is generally done using L2TP but what would be the recommended daemon to use. I know of rp-l2tp which I have used in the ...
3
votes
1answer
1k views

No TCP connections to hosts behind VPN server (SYN, SYN-ACK, but no ACK), UDP, ICMP works

I'm probably doing something incredibly stupid, but I just can't seem to figure out what. Here's what I'm trying to accomplish: I want remote users to be able to log into our network, so I set up a ...
3
votes
1answer
2k views

Configuring OS X L2TP VPN to use Certificate for IPSEC layer instead of Pre Shared Key

I'm trying to setup a L2TP VPN on an OS X Snow Leopard Server setup, and have had success using a pre-shared key, however I would rather not rely on a simple string, and use a certificate instead. ...
3
votes
1answer
8k views

Cisco ASA 5505 - L2TP over IPsec

I have followed this document on cisco site to set up the L2TP over IPsec connection. When I try to establish a VPN to ASA 5505 from my Windows XP, after I click on "connect" button, the "Connecting ...
3
votes
2answers
2k views

Using Ubuntu Karmic as an L2TP Client for VPN

I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working. The only details I have are the remote IP address, username & password, and a shared secret string; ...
2
votes
3answers
6k views

PFsense VPN all types failing?

I am trying to configure a new PFsense router (64 bit) and am trying to to get the VPN functions working. I have enabled PPTP, L2TP and IPSec. I've added allow all rules to all LAN's, WAN's and each ...
2
votes
1answer
3k views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
2
votes
1answer
1k views

Forwarding VPN via reverse SSH tunnel

I have a server that reverse ssh tunnels to a secondary server. The secondary server then acts as a "bridge" to the internal server (the external server's IP address is what I connect to). This works ...
2
votes
1answer
263 views

Packet flooding while configuring a Debian L2TP/IPSec client?

I'm currently at my wits end trying to configure an L2TP over IPSec VPN connection on my Debian using openswan and xl2tp box connecting to a server of unknown configuration. I've managed to ...
2
votes
1answer
340 views

L2TP and multiple interfaces on the machine

We have setup ipsec and l2tp on linux. One question came up (due to firewall management policy) is whether it's possible to have 1 virtual interface instead of one per connected client. Now we have: ...
2
votes
1answer
15k views

iptables rules to allow L2TP/IPSEC VPN behind firewall

I asked about this on the Smoothwall Express forums but they are understandably reluctant to provide to much help. After all, they really want to sell the commercial version. I need to provide an ...
2
votes
1answer
1k views

OpenSwan + xl2tpd VPN: How can I share Internet connection

I have an OpenSwan IPSec + L2TP VPN on Linux setup working from off of my server so I can connect to it from my laptop (roadwarrior setup). I am able to connect to the VPN remotely just fine, however ...
2
votes
1answer
106 views

VPN for Video stream

I work at a digital TV broadcast company (cable), we have 2 head ends, one in the US and one in the Caribbean, we currently connect both sites with a cisco L2TPv3 pseudowire VPN between both sites, ...
2
votes
1answer
1k views

L2TP/IPsec through HTTP Port 80

i got an VPN (L2TP/IPsec) Tunnel running on my synology nas. my router is configured for vpn passthrough. so everything is fine. furthermore i got an webservice running on port 80. now i got the ...
2
votes
1answer
800 views

L2TP server allows connections through firewall for iPhone/iPad, but not windows

Our L2TP server (running Windows 2008 RRAS) is behind a NAT firewall. I've already verified that it is passing NAT-T. The firewall rules are all set up correctly to pass GRE, IKE, L2TP and there are ...
2
votes
2answers
12k views

Error connecting to Sonicwall L2TP VPN from iPad/iPhone

A client has a Sonicwall Pro 2040 running SonicOS 3.0, and they'd like to be able to use the L2TP VPN client from their iPads to connect to internal services (Citrix, etc). I've enabled the L2TP VPN ...
2
votes
1answer
436 views
+100

L2TP VPN Connection on Debian Squeeze

I need to make an L2TP VPN connection from a Debian Squeeze server. What I have is: The server IP address Shared Key My username and password Just using these 3 parameteres I can establish the ...
2
votes
1answer
574 views

L2TP server - site-to-site vpn connection

I am not sure this is the right place for this question but here goes. We want to connect users using an L2TP VPN connection to a users at the other end of a SonicWall site-to-site VPN. Currently we ...
2
votes
0answers
384 views

Server doesn't accept L2TP connections although it is configured to

I own a Windows Server 2003 VPN server which my clients connect to for accessing the local network.. I have configures the RRAS to use the RADIUS authentication and accept connections. The PPTP ...
2
votes
0answers
2k views

setup Zyxel USG 20W as L2TP VPN Server

I have a Zywall USG 20W (wireless disabled) behind a router supplied by my ISP. All ports (both TCP and UDP) on the ISP router are forwarded to the 20W. I'm trying to configure an L2TP VPN to be used ...
2
votes
0answers
3k views

Debian squeeze as L2TP/IPSec gateway for Android devices

I'm trying to configure Debian squeeze as L2TP/IPSec VPN for Android devices, but with no great success. So far I have done following: Successfully configured Debian with openswan implementation of ...
1
vote
1answer
2k views

ASA 5505 stops local internet when connected to VPN

I have a Cisco ASA router running firmware 8.2(5) which hosts an internal LAN on 192.168.30.0/24. I have used the VPN Wizard to setup L2TP access and I can connect in fine from a Windows box and can ...
1
vote
2answers
2k views

L2TP VPN routing issue with iphone/ipad

I am able to connect to our company's VPN with L2TP on the iphone and ipad, however, I can only get to certain resources in our company network but not others. After looking at the iOS device logs ...
1
vote
1answer
2k views

Pfsense IPsec VPN not listening on port 500?

I am trying to setup a home VPN with IPsec as I have read about PPTP having some security problems and being outdated. I found an article on the web that shows you how to setup an IPsec VPN here which ...
1
vote
1answer
6k views

Can't get the L2TP IPSEC up and running

i have an Ubuntu 11.10 (oneiric) server running on a ReadyNAS. Im planning to use this to accept ipsec+l2tp connections through a router. However, the connection is failing somewhere half through. ...
1
vote
2answers
1k views

L2TP/IPSec PreShared Key VPN

I tried to setup a L2TP/IPsec VPN server with PSK authentication according to this tutorial on a Ubuntu server but there is a problem when I'm trying to connect to this server with a Windows 7 client. ...
1
vote
5answers
4k views

How to issue machine certificates to Android devices trying to connect to L2TP VPN (L2TP/IPsec with Certificate)?

I are trying to find a way to connect Android devices to our VPN box running Windows Sever 2008. We manage to configure a couple Android devices to connect via PPTP. However, I would like to be able ...
1
vote
1answer
7k views

IPsec/L2TP VPN with OSX client: xl2tpd reports “maximum retries exceeded”

I'm following this guide for getting an IPsec/L2TP VPN server set up on a Gentoo machine, and I'm having trouble getting an OS X client to connect. From the logs, I believe I'm making an IPsec ...
1
vote
1answer
3k views

Setting-up Windows Server 2003 as an L2TP/IPSEC VPN server

I'm looking for a pointer to step-by-step instructions for setting-up a Win Server 2003 Std box as a L2TP/IPSEC VPN server. I don't need to use certificates - pre-shared key is sufficient - and the ...
1
vote
1answer
612 views

Is L2TP preshared key anywhere stored in plaintext on w2k8?

Some time ago I have configured l2tp vpn server on w2k8 rras that uses preshared key. Now I am trying to setup another client but the key that I have documented does not seem to be correct. I have ...
1
vote
1answer
844 views

Extract number of users connected to IPSsec/L2tpd server

We have a new corporate VPN server running Ipsec (Openswan) + xl2tpd + pppd. When a user connects, pppd runs the /etc/ppp/auth-up script which logs the time and username that has connected to ...
1
vote
1answer
2k views

Mac and L2TP VPN no problems, xp, vista and 7 no go :s

I've got some weird problem and I'm out off options. The situation: When connecting from my mac to the VPN server (Windows Server 2003 R2) with L2TP PSK, everything works like it should. However, ...
1
vote
1answer
3k views

L2TP and IPSEC from Windows XP: Where do I put the IPSEC group name?

I'm completely new to networking, but need to setup a VPN. I have a linksys router and have gone through and set it up to use IPSEC and have setup a group name, user, password and pre-shared key. But ...
1
vote
0answers
13 views

Solaris 11.1 as L2TP Client

Is there anyway to do this with a PSK? I need to connect to an off-site Windows L2TP server. I can't seem to find any documentation on using Solaris as a VPN Client.
1
vote
0answers
32 views

udp 300 - acl drop - flow is denied

I am facing below issue after connecting l2tp with Cisco asa. Split tunnel is configured. It drops dhcp packets. Here is capture and config. 29: 22:39:38.733909 192.168.255.1.68 > ...
1
vote
0answers
19 views

Can't connect multiple user to L2TP VPN server (Error 720)

I have a VPS running windows server 2008 r2 standard. I configured Routing And Remote Access and NAT , i created multiple users with "Network Access Permission: Allow Access" . What i have done in ...
1
vote
0answers
23 views

Routing is disabled for LAN users while choosing all-net for IPSec tunnel

I have VPN with L2TP/IPSec server and tunnel configured. When I choose all-nets 0.0.0.0/0 to allow connection from any computer in the world, all LAN users with subnet 10.0.0.0/8 are disconnected from ...
1
vote
0answers
145 views

Encrypted layer 2 tunnel over Internet for a contiguous subnet

I have two offices that are connected at layer 2 with fiber on a primary link with contiguous subnets on each end(it won't change anytime soon). It works just fine, I have full end-to-end layer 2 ...
1
vote
0answers
36 views

L2TP loadbalancing

Due to need to scale, I'm setting a new l2tp server using l2tpns and trying to balance the load between my two l2tp servers using LVS LVS configuration ipvsadm -A -u 192.168.10.10:1701 -s sh ipvsadm ...
1
vote
1answer
344 views

cisco ASA 5505 l2tp vpn

I have a problem with cisco asa 5505 vpn configuration. I set l2tp for windows clients. I can connect to vpn but: when i have "use default gateway on remote network" on NIC enabled i have access to ...
1
vote
0answers
187 views

Sonicwall L2TP Server is using a “phantom” internal DHCP server

Following a few articles on options 121 and 249, I'd like to push out routes to the L2TP VPN clients using the internal DHCP server on the Sonicwall. However, the Sonicwall seems to be using a ...