Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [l2tp]

Layer 2 Tunnelling Protocol is a layer 7 networking protocol which provides an unsecure layer 2 tunnel. It runs on top of UDP, and is commonly used to carry PPP sessions. Security is usually provided with the addition of IPsec.

0
votes
0answers
4 views

Windows Server 2016 - L2TP VPN in RRAS only accessable from internal interface, not from external

I have a problem installing a L2TP VPN Connection with Windows Server 2019. There are two interfaces: "Intern" - 10.0.0.1 / Internal interface "Extern" - 192.168.2.3 / External interface, connected ...
0
votes
0answers
13 views

Win 2008 R2 L2TP with Win 10 and Macs

Here's the scenario: Windows 2008 R2 with RRAS. VPN setup for PPTP and L2TP L2TP uses pre-shared key. *Mac clients connected to L2TP w/ key perfectly, in or outside of firewall. *Windows 10 clients ...
0
votes
0answers
76 views

Connect L2TP VPN via command line in Ubuntu

I can create PPTP connections in Linux via command line with pptpsetup easily and connect to multiple VPN servers concurrently. I want to know is there a way for L2TP VPN connection to do such ...
1
vote
1answer
42 views

L2TP VPN connection not working - PAYLOAD_MALFORMED

I am trying to replace an old VMWare server (ESXI 5.1.0) with a new one (ESXI 6.7.0) and to do that we are trying to replicate the setup of the old one. We have another physical server that needs to ...
0
votes
0answers
652 views

Trying to setup L2TP and IKEv2 on the same server with Strongswan

I'm attempting to setup both L2TP (for use on my Android phone) and IKEv2 (for use on my Mac) on the same server with Strongswan I'm getting the following error when connecting L2TP, but IKEv2 works ...
0
votes
0answers
37 views

how my ipsec/l2tp server ubuntu can connect to LAN NETWORK of my ipsec client

i have my configuration l2tp/ipsec vpn on ubuntu like this server (ubuntu) have to 2 interface : a.IPSEC/L2TP server with ip 192.168.42.1 b.eth0 that have ip public 182.91.76.243 now i have client ...
0
votes
2answers
76 views

L2TP/IPSec: Linux can not connect to Cisco ASA (but Windows can)

Our partner provides a service that is available only through the L2TP/IPSec tunnel. We successfully connect to it from Windows, but the connection hangs dead a couple of times a week. Therefore, I ...
0
votes
0answers
56 views

Two mikrotik routers sharing same dhcp pool

I have two Mikrotik routers, RB3011 (R1) and RB951G (R2). The first router (R1) is active, connected to internet and to the local network. The second one (R2) is inactive at the moment. Officially R1 ...
1
vote
0answers
138 views

How do I route internet traffic through an established L2TP connection?

I am struggling to connect and, more importantly, route traffic from an Ubuntu server (this means that Network-Manager and any GUI tools are out of the question) to an L2TP-IPSec VPN server running on ...
1
vote
0answers
504 views

L2TP ipsec using network-manager-l2tp and strongswan ubuntu 18.04

The VPN works flawlessly on OSX and Windows 10 but no luck with ubuntu VPN gets connected on ubuntu using Phase1 Algorithms : 3des-sha1-modp1024 Phase2 Algorithms : 3des-sha1 And in 10 seconds ...
0
votes
1answer
146 views

SoftEther VPN AD Authentication only works for wildcard user

I'm using SoftEther on SBS2011, with L2TP/IPSec protocol. My initial client is Windows 10 with built-in L2TP/IPSec protocol. In my SoftEther Users, if I add a wildcard (*) user, and select "NT Domain ...
3
votes
1answer
264 views

How to stop Windows Filtering Platform blocking ICMP packets for legitimate RDP traffic over L2TP tunnel?

RDP via Windows 2008 L2TP to Windows 10 Pro did never work flawless. The first attempt in September 2018 needed the client Cord.app to be replaced with Royal TSX on OS X 10.9.5. The remote Win10 box ...
1
vote
2answers
110 views

VPN into router behind a Sonicwall

We've installed a Sonicwall TZ Firewall and have configured an L2TP/Ipsec VPN. The SonicWall is connected to an internal router on the subnet 192.168.168.0/30 with the SonicWall on 192.168.168.1 and ...
0
votes
1answer
244 views

Administration of multiple sites (tunneling) - MikroTik & NAT

I would like to ask you for your opinion. I need to find a secure way how to manage small remote sites where I have RBs. We have HQ, where is Kerio Control as a FW and a lot of small sites with ...
-2
votes
1answer
33 views

How to veryify if VPN network encrypt data correctly in Windows 7?

I configured IPSec VPN network on my router and I successfully to this VPN in local Network. I have now 2 connections under control panel: Local connection My vpn I configured full data encryption, ...
0
votes
1answer
146 views

Configure L2TPv3 on Ubuntu using hostnames for peers instead of IP

Is it possible to configure L2TPv3 using ip l2tp commands on Ubuntu 18.04 but using hostnames for peers instead of static IP addresses ? If so can someone give me a hint on how to do this ?
3
votes
1answer
320 views

strongSwan 5.6.2 and xl2tp 1.3.12 on Ubuntu 18.04 SA established but no traffic

Since updating strongSwan and xl2tpd to the latest versions available for Ubuntu I encounter a problem with ESP and AH in L2TP. Server config: Interface for generating traffic ens224: flags=4163<...
0
votes
0answers
625 views

Low L2TP VPN performance

I have multiple sites need to be linked together via vpn. AWS is the main site with file server and connected to "cloud hosting 1" via IPsec site to site vpn. And "cloud hosting 1" works as a hub , ...
0
votes
0answers
88 views

check L2tp/ipsec connected username in linux

Is there any way to get connected l2tp/ipsec username in linux? Like in pptp vpn we can use "last |grep ppp" this command to get connected username. I have tried so many command but could not find any ...
1
vote
1answer
2k views

How to forward IPsec VPN with iptables

Hello I have some questions on how to use iptables to forward IPsec VPN data. Here is what I want to do: WAN Computer -- (eth1/WAN IP)Server1(eth0/10.81.1.2) -- (eth0/10.66.2.3)Server2(eth1/WAN IP) ...
0
votes
0answers
155 views

Change remote IP when using L2TP VPN with docker

I have an L2TP server set up with docker-compose, and nginx to filter certain hosts to a hostname, but when I try to connect, nginx is reading the original IP, not the IP proxied through the VPN. ...
1
vote
2answers
375 views

How do I get an L2TP Foxpass VPN connection working in Windows 10?

I have an office VPN that I need to connect to which uses L2TP/IPsec with a pre-shared key. At home (on my home network) I have two computers: a MacBook Pro, and a Windows 10 machine. I am able to ...
0
votes
0answers
766 views

L2TP over IPsec VPN between ZyWALL USG 100 and iPhone NO_PROPOSAL_CHOSEN

I am trying to setup an L2TP over IPsec VPN between a ZyWALL USG 100 and an iPhone but the connection always fails with IKE error NO_PROPOSAL_CHOSEN. I believe this means that there's a policy ...
1
vote
1answer
2k views

Windows VPN client - how to make it connect to a different port?

I have a L2TP/IPsec server setup on a CentOS box that I am using for multiple purposes, and I wish some clients connect one way, other clients connect the other way, and get different sets of ...
1
vote
0answers
95 views

RRAS L2TP VPN DNS Issue on iDevices - No Internet

I've setup an L2TP VPN server on Windows Server 2012 using RRAS and NPS primarily for connections from iPhone/iPad clients etc, the problem is I can't get internet connectivity to work when connected ...
1
vote
1answer
421 views

Windows RRAS VPN failing to set options on Mac L2TP clients due to DHCP relay discarding packets

When setting up an L2TP VPN service for remote access on Windows Routing and Remote Access, we ran into an odd problem with setting options on the connecting clients. The way to provide these ...
0
votes
1answer
379 views

Using a Windows Server 2016 AWS instance how can I allow the ESP protocol in the security group of the server?

Stack Overflow Link I am following. (last step of step 1 of the anwser I have attempted to change the inbound/outbound security groups for my server but ESP is not on the list of protocols. I tried ...
2
votes
0answers
288 views

l2tpv3 tunnel with local ip in vrf (linux kernel vrf)

On a ubuntu host I have two identical ip addresses configured on two interfaces enslaved to two different kernel vrfs. Here they are: mikle@LabHost:~$ ip link show vrf VRF1401 7: enp3s0f0.1401@...
0
votes
1answer
307 views

L2TP VPN server only for DNS

I am trying to figure out a way to bypass my ISP's DNS hijacking, by attempting to replicate a Smart VPN solution. Is there a way I could set up a Linux L2TP server that does not forward traffic, but ...
2
votes
1answer
3k views

Connected to Windows Server 2016 VPN on AWS but could not ping resources in VPC

I followed this guide to setup a VPN on a Windows Server 2016 instance in EC2 with only a single network interface and an assigned Elastic IP. I was able to connect my macOS to the VPN successfully ...
0
votes
0answers
410 views

Routing to L2TP/IPSec VPN (strongswan, xl2tpd). Can ping server inside VPN, cannot ssh (SSH is not ESP payload)

I created a L2TP/IPSec tunnel and I am struggling with routing, I cannot SSH to a machine in the remote network. My local system is Debian buster (current testing). Here is my local networkg config; ...
1
vote
1answer
361 views

Windows L2TP VPN Server Connection Issues

I've been troubleshooting a Windows VPN server I have set up at a client for the past couple months ever since Apple dropped PPTP support on iOS 10. We originally were using PPTP but I've set up L2TP ...
0
votes
1answer
559 views

L2TPv3 tunnel private IPs not working

I'm trying to setup L2TPv3 tunnel between 2 servers - CentOS 7 and Ubuntu 16 On CentOS 7 end I have the following: ip l2tp add tunnel tunnel_id 6000 peer_tunnel_id 5000 encap udp local LOCAL_IP ...
-1
votes
1answer
181 views

How can I access my own IP under StrongSwan? [MacOS]

I've set up SoftEther VPN on a brand-new Ubuntu 16.04 server and connected macOS, Windows and iOS client to it. I've created Ruby on Rails webserver on my macbook and binded it to my VPN address. ...
0
votes
0answers
1k views

Unable to connect to L2TP through Windows 10

I was since now unable to connect to a L2TP VPN with a pre shared key in Windows 10. And after trying this from tp-link, http://www.tp-link.com/us/faq-1029.html I have notice after a reboot that I ...
0
votes
3answers
2k views

Configuring L2TP/IPSec on Cisco Router 2911

Hi all, I have problem with L2TP/IPSec configuration in Cisco Router 2911 . I cannot connect via Windows 7,8.1,10 build in vpn client. Here is my config : aaa new-model aaa authentication ppp L2TP-...
0
votes
1answer
601 views

L2TP VPN http traffic blocked

I've got a VPN L2TP/IPsec server behind a NAT-T device. I had issues with connecting windows clients to the server but that was resolved via adding a registry entry "...
2
votes
0answers
514 views

Can't access remote shares on L2TP VPN

I've set up a L2TP VPN for my (Microsoft Surface Pro 4) tablet when I am at work so I can still access my files on my local server. However when I'm connected to the VPN I can't seem to access my ...
2
votes
1answer
725 views

How do I bypass my VPN when making requests to IPs in my local network?

I have L2TP VPN connection on my Ubuntu laptop and I want to connect to a server in my local network. How do I do so by bypassing the VPN connection?
1
vote
0answers
882 views

Windows L2TP VPN client has no Internet

The L2TP/IPSec VPN server is a Mikrotik router, with these firewall configurations: /ip firewall filter print Flags: X - disabled, I - invalid, D - dynamic 0 D ;;; special dummy rule to show ...
1
vote
1answer
2k views

xl2tp + strongswan ipsec — xl2tp timeout

I'm trying to connect to a ipsec/l2tp vpn from a private network behind a nat-router. It works from different windows clients, but from my linux machine (openSuSE 12.3, stronswan 5.1.3, xl2tp 1.3.0) I ...
0
votes
1answer
306 views

What secure encryption algorithm can I use with Windows L2TP client?

I successfully got a Mikrotik router to run as L2TP server, but it looks like Windows clients would fail to connect if I remove 3DES, which is not exactly secure, from the list of encryption algorithm....
1
vote
0answers
111 views

command/syscall to find the peer IP used by a pointopoint interface (VPN)

What syscall or command could I use to find the remote peer IP of an active tunnel on a *nix system When Connecting to a VPN either l2tp/openvpn ppp0 or tun/tap the user specify the remote IP or an ...
1
vote
0answers
493 views

Unable to connect to server through VPN L2TP

I have set my Server app (OSX) to use VPN feature, with L2TP, using a VPN Host Name who is a FQDN pointed to my public static IP. By default it came with a shared secret, and a small range of IP's. In ...
0
votes
1answer
463 views

Cisco ISR with Windows L2TP VPN

I have a Server 2012 box running PPTP and L2TP VPN services behind a Cisco 1841 ISR. My NAT rules allow the PPTP traffic to connect, however I cannot complete a connection with L2TP. The relevant ...
0
votes
1answer
868 views

Cisco IPSec Issue with Windows 10

How can I connect a Windows 10 laptop to a Cisco ASA via VPN using L2TP/IPSec rather than AnyConnect? Apparently, the Cisco client is no longer supported, and the Windows 10 built-in client gives me ...
0
votes
1answer
27 views

Expose L2TP network inside OpenVPN

I have a L2TP permanent connection setup in RRAS within Windows Server 2012R2 and an OpenVPN service listening for inbound connections. I'd like that the OpenVPN clients to have access to the network ...
1
vote
1answer
716 views

What configuration issue is preventing Samba Network Shares from being visible over VPN?

I set up a VPN using L2TP and IPSEC (with LibreSwan) using this script: https://github.com/hwdsl2/setup-ipsec-vpn The only change I had to make was to change the instances of 'eth0' to the new format ...
0
votes
0answers
2k views

How to change IP-address of the Synology NAS-station when using VPN-connection?

I have set up VPN-connection (L2TP/IPSec) at our office lately. The main thing is that our employees could access Synology NAS-station from their home. VPN-connection works great, but the problem is ...
0
votes
1answer
42 views

Hosts with identical local IP's in separate environments disconnecting each other on connection to L2TP VPN

Host A, located in Virginia, connecting to TZ-215 L2TP VPN (WAN GroupVPN) server. Local IP: 192.168.1.2. Connecting using a unique local account setup on TZ-215. Host B, located in Pennsylvania, ...