Layer 2 Tunnelling Protocol is a layer 7 networking protocol which provides an unsecure layer 2 tunnel. It runs on top of UDP, and is commonly used to carry PPP sessions. Security is usually provided with the addition of IPsec.

learn more… | top users | synonyms

8
votes
1answer
260 views

If IPSec has its own IP tunnel support why do some add LT2P to the stack?

I understand that you can use IPSec to tunnel data securely. According to the Wikipedia page and a few other sources it can also tunnel IP packets and then route them through an interface. That would ...
6
votes
2answers
15k views

L2TP client for Ubuntu

It's easy enough to get a pptp client going on a Ubuntu 9.04 (Jaunty) desktop: sudo apt-get install network-manager-pptp However, I can't seem to find documentation find a corresponding L2TP ...
6
votes
1answer
5k views

L2TP/IPSec from Windows 7 to ASA 5520

I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
4
votes
2answers
7k views

Is it possible for L2TP VPN to do auto route configuration for client during connected?

We've setup a L2TP VPN server with this tutorial, everything works like a charm. The only issue is We don't want client to route all traffic using this VPN, only a particular subnet, e.g. ...
4
votes
2answers
14k views

Which ports for IPSEC/LT2P?

I have a firewall/router (not doing NAT). I've googled and seen conflicting answers. It seems UDP 500 is the common one. But the others are confusing. 1701, 4500. And some say I need to also ...
4
votes
3answers
2k views

What is difference between L2TP and PPTP?

I need a high performance VPN server, who can tell me the difference between L2TP and PPTP ?
4
votes
2answers
15k views

Simple L2TP/IPsec server not working (openswan, xl2tpd, Ubuntu, Windows)

I configured openswan and xl2tpd on an Ubuntu 12.04 server (on EC2) by following various tutorials/documentation which seem to largely say the same things, but most recently this one. However, my ...
4
votes
1answer
4k views

VPN server not responding, no indications of blocked traffic

I have a Mac OS X Server (10.9) machine running a L2TP/IPSec VPN server. Configuration appears to be fine, and the hostname of both the server and the VPN is set to a DynDNS hostname. The server is ...
4
votes
1answer
2k views

Configuring OS X L2TP VPN to use Certificate for IPSEC layer instead of Pre Shared Key

I'm trying to setup a L2TP VPN on an OS X Snow Leopard Server setup, and have had success using a pre-shared key, however I would rather not rely on a simple string, and use a certificate instead. ...
3
votes
1answer
2k views

Juniper SSG 5 VPN

I have a host who set up our Juniper SSG 5 VPN with Firmware version-6.2.0r5.0 I've been trying to set up VPN on it using this guide: http://kb.juniper.net/InfoCenter/index?page=content&id=KB4094 ...
3
votes
1answer
1k views

L2TP server allows connections through firewall for iPhone/iPad, but not windows

Our L2TP server (running Windows 2008 RRAS) is behind a NAT firewall. I've already verified that it is passing NAT-T. The firewall rules are all set up correctly to pass GRE, IKE, L2TP and there are ...
3
votes
1answer
650 views

Linux L2TP Daemon Recommendation

I need to setup a tunnel between two points with no encryption. I know this is generally done using L2TP but what would be the recommended daemon to use. I know of rp-l2tp which I have used in the ...
3
votes
1answer
1k views

No TCP connections to hosts behind VPN server (SYN, SYN-ACK, but no ACK), UDP, ICMP works

I'm probably doing something incredibly stupid, but I just can't seem to figure out what. Here's what I'm trying to accomplish: I want remote users to be able to log into our network, so I set up a ...
3
votes
1answer
8k views

Cisco ASA 5505 - L2TP over IPsec

I have followed this document on cisco site to set up the L2TP over IPsec connection. When I try to establish a VPN to ASA 5505 from my Windows XP, after I click on "connect" button, the "Connecting ...
3
votes
1answer
79 views

Can't Ping other local ips on l2tp vpn connection, getting: ping: sendmsg: No such device

I have setup an l2tp client using xl2tp to connect to an l2tp vpn server. The server connection requires that the connection be setup WITHOUT ipsec. So I have set up a basic xl2tp connection. The ...
3
votes
2answers
2k views

Using Ubuntu Karmic as an L2TP Client for VPN

I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working. The only details I have are the remote IP address, username & password, and a shared secret string; ...
2
votes
3answers
7k views

PFsense VPN all types failing?

I am trying to configure a new PFsense router (64 bit) and am trying to to get the VPN functions working. I have enabled PPTP, L2TP and IPSec. I've added allow all rules to all LAN's, WAN's and each ...
2
votes
1answer
3k views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
2
votes
1answer
7k views

IPsec/L2TP VPN with OSX client: xl2tpd reports “maximum retries exceeded”

I'm following this guide for getting an IPsec/L2TP VPN server set up on a Gentoo machine, and I'm having trouble getting an OS X client to connect. From the logs, I believe I'm making an IPsec ...
2
votes
2answers
2k views

L2TP VPN routing issue with iphone/ipad

I am able to connect to our company's VPN with L2TP on the iphone and ipad, however, I can only get to certain resources in our company network but not others. After looking at the iOS device logs ...
2
votes
1answer
1k views

Forwarding VPN via reverse SSH tunnel

I have a server that reverse ssh tunnels to a secondary server. The secondary server then acts as a "bridge" to the internal server (the external server's IP address is what I connect to). This works ...
2
votes
1answer
283 views

Packet flooding while configuring a Debian L2TP/IPSec client?

I'm currently at my wits end trying to configure an L2TP over IPSec VPN connection on my Debian using openswan and xl2tp box connecting to a server of unknown configuration. I've managed to ...
2
votes
1answer
391 views

L2TP and multiple interfaces on the machine

We have setup ipsec and l2tp on linux. One question came up (due to firewall management policy) is whether it's possible to have 1 virtual interface instead of one per connected client. Now we have: ...
2
votes
1answer
17k views

iptables rules to allow L2TP/IPSEC VPN behind firewall

I asked about this on the Smoothwall Express forums but they are understandably reluctant to provide to much help. After all, they really want to sell the commercial version. I need to provide an ...
2
votes
1answer
1k views

OpenSwan + xl2tpd VPN: How can I share Internet connection

I have an OpenSwan IPSec + L2TP VPN on Linux setup working from off of my server so I can connect to it from my laptop (roadwarrior setup). I am able to connect to the VPN remotely just fine, however ...
2
votes
1answer
327 views

VPN for Video stream

I work at a digital TV broadcast company (cable), we have 2 head ends, one in the US and one in the Caribbean, we currently connect both sites with a cisco L2TPv3 pseudowire VPN between both sites, ...
2
votes
1answer
2k views

L2TP/IPsec through HTTP Port 80

i got an VPN (L2TP/IPsec) Tunnel running on my synology nas. my router is configured for vpn passthrough. so everything is fine. furthermore i got an webservice running on port 80. now i got the ...
2
votes
2answers
13k views

Error connecting to Sonicwall L2TP VPN from iPad/iPhone

A client has a Sonicwall Pro 2040 running SonicOS 3.0, and they'd like to be able to use the L2TP VPN client from their iPads to connect to internal services (Citrix, etc). I've enabled the L2TP VPN ...
2
votes
1answer
577 views

L2TP VPN Connection on Debian Squeeze

I need to make an L2TP VPN connection from a Debian Squeeze server. What I have is: The server IP address Shared Key My username and password Just using these 3 parameteres I can establish the ...
2
votes
1answer
694 views

L2TP server - site-to-site vpn connection

I am not sure this is the right place for this question but here goes. We want to connect users using an L2TP VPN connection to a users at the other end of a SonicWall site-to-site VPN. Currently we ...
2
votes
0answers
461 views

Server doesn't accept L2TP connections although it is configured to

I own a Windows Server 2003 VPN server which my clients connect to for accessing the local network.. I have configures the RRAS to use the RADIUS authentication and accept connections. The PPTP ...
2
votes
0answers
3k views

Debian squeeze as L2TP/IPSec gateway for Android devices

I'm trying to configure Debian squeeze as L2TP/IPSec VPN for Android devices, but with no great success. So far I have done following: Successfully configured Debian with openswan implementation of ...
1
vote
1answer
2k views

ASA 5505 stops local internet when connected to VPN

I have a Cisco ASA router running firmware 8.2(5) which hosts an internal LAN on 192.168.30.0/24. I have used the VPN Wizard to setup L2TP access and I can connect in fine from a Windows box and can ...
1
vote
1answer
3k views

openswan and xl2tpd tunnel not working?

Since weeks i want to setup l2tp tunnel with xl2tpd and openswan in debian wheezy, the external interface is ppp0 with dynamic ip and the internal interface is eth0 with ip address 192.168.1.1. l2tp ...
1
vote
1answer
2k views

Pfsense IPsec VPN not listening on port 500?

I am trying to setup a home VPN with IPsec as I have read about PPTP having some security problems and being outdated. I found an article on the web that shows you how to setup an IPsec VPN here which ...
1
vote
1answer
7k views

Can't get the L2TP IPSEC up and running

i have an Ubuntu 11.10 (oneiric) server running on a ReadyNAS. Im planning to use this to accept ipsec+l2tp connections through a router. However, the connection is failing somewhere half through. ...
1
vote
2answers
1k views

L2TP/IPSec PreShared Key VPN

I tried to setup a L2TP/IPsec VPN server with PSK authentication according to this tutorial on a Ubuntu server but there is a problem when I'm trying to connect to this server with a Windows 7 client. ...
1
vote
5answers
4k views

How to issue machine certificates to Android devices trying to connect to L2TP VPN (L2TP/IPsec with Certificate)?

I are trying to find a way to connect Android devices to our VPN box running Windows Sever 2008. We manage to configure a couple Android devices to connect via PPTP. However, I would like to be able ...
1
vote
1answer
4k views

Setting-up Windows Server 2003 as an L2TP/IPSEC VPN server

I'm looking for a pointer to step-by-step instructions for setting-up a Win Server 2003 Std box as a L2TP/IPSEC VPN server. I don't need to use certificates - pre-shared key is sufficient - and the ...
1
vote
1answer
22k views

I can connect, but cannot ping/route to remote VPN computers

Setup: L2TP VPN Server on a Windows Server 2008 machine which is behind a router, which is behind a modem/router. Modem/Router (IP: 192.168.2.1, Subnet: 255.255.255.0, DHCP serves 192.168.2.2 to ...
1
vote
1answer
758 views

Is L2TP preshared key anywhere stored in plaintext on w2k8?

Some time ago I have configured l2tp vpn server on w2k8 rras that uses preshared key. Now I am trying to setup another client but the key that I have documented does not seem to be correct. I have ...
1
vote
1answer
1k views

Extract number of users connected to IPSsec/L2tpd server

We have a new corporate VPN server running Ipsec (Openswan) + xl2tpd + pppd. When a user connects, pppd runs the /etc/ppp/auth-up script which logs the time and username that has connected to ...
1
vote
1answer
3k views

Mac and L2TP VPN no problems, xp, vista and 7 no go :s

I've got some weird problem and I'm out off options. The situation: When connecting from my mac to the VPN server (Windows Server 2003 R2) with L2TP PSK, everything works like it should. However, ...
1
vote
1answer
3k views

L2TP and IPSEC from Windows XP: Where do I put the IPSEC group name?

I'm completely new to networking, but need to setup a VPN. I have a linksys router and have gone through and set it up to use IPSEC and have setup a group name, user, password and pre-shared key. But ...
1
vote
1answer
45 views

What configuration issue is preventing Samba Network Shares from being visible over VPN?

I set up a VPN using L2TP and IPSEC (with LibreSwan) using this script: https://github.com/hwdsl2/setup-ipsec-vpn The only change I had to make was to change the instances of 'eth0' to the new format ...
1
vote
1answer
18 views

Hosts with identical local IP's in separate environments disconnecting each other on connection to L2TP VPN

Host A, located in Virginia, connecting to TZ-215 L2TP VPN (WAN GroupVPN) server. Local IP: 192.168.1.2. Connecting using a unique local account setup on TZ-215. Host B, located in Pennsylvania, ...
1
vote
0answers
61 views

udp 300 - acl drop - flow is denied

I am facing below issue after connecting l2tp with Cisco asa. Split tunnel is configured. It drops dhcp packets. Here is capture and config. 29: 22:39:38.733909 192.168.255.1.68 > ...
1
vote
0answers
125 views

Can't connect multiple user to L2TP VPN server (Error 720)

I have a VPS running windows server 2008 r2 standard. I configured Routing And Remote Access and NAT , i created multiple users with "Network Access Permission: Allow Access" . What i have done in ...
1
vote
1answer
533 views

Setting up site-to-site IPsec in bridged mode

I'd like to set up site-to-site IPsec in bridged mode: that is, where the hosts in each site don't need to be modified to use the IPsec gateway, but the IPsec gateway acts as a pseudowire. My plan to ...
1
vote
0answers
24 views

Routing is disabled for LAN users while choosing all-net for IPSec tunnel

I have VPN with L2TP/IPSec server and tunnel configured. When I choose all-nets 0.0.0.0/0 to allow connection from any computer in the world, all LAN users with subnet 10.0.0.0/8 are disconnected from ...