Questions tagged [l2tp]
Layer 2 Tunnelling Protocol is a layer 7 networking protocol which provides an unsecure layer 2 tunnel. It runs on top of UDP, and is commonly used to carry PPP sessions. Security is usually provided with the addition of IPsec.
202
questions
33
votes
3
answers
300k
views
Which ports for IPSEC/LT2P?
I have a firewall/router (not doing NAT).
I've googled and seen conflicting answers. It seems UDP 500 is the common one. But the others are confusing. 1701, 4500.
And some say I need to also ...
- 14.6k
21
votes
2
answers
42k
views
Is it possible for L2TP VPN to do auto route configuration for client during connected?
We've setup a L2TP VPN server with this tutorial, everything works like a charm.
The only issue is
We don't want client to route all traffic using this VPN, only a particular subnet, e.g. 10.0.0.0/...
- 2,175
10
votes
2
answers
8k
views
L2TP/IPSec from Windows 7 to ASA 5520
I am trying to setup L2TP/IPSec on our ASA5520 to support a fringe case for one of our developers. The Windows VPN subsystem apparently stores the kerberos or NTLM cookie for the login when you use ...
- 3,486
8
votes
1
answer
339
views
If IPSec has its own IP tunnel support why do some add LT2P to the stack?
I understand that you can use IPSec to tunnel data securely. According to the Wikipedia page and a few other sources it can also tunnel IP packets and then route them through an interface. That would ...
- 790
6
votes
3
answers
26k
views
Simple L2TP/IPsec server not working (openswan, xl2tpd, Ubuntu, Windows)
I configured openswan and xl2tpd on an Ubuntu 12.04 server (on EC2) by following various tutorials/documentation which seem to largely say the same things, but most recently this one.
However, my ...
- 1,665
6
votes
1
answer
8k
views
How do I bypass my VPN when making requests to IPs in my local network?
I have L2TP VPN connection on my Ubuntu laptop and I want to connect to a server in my local network. How do I do so by bypassing the VPN connection?
6
votes
3
answers
28k
views
L2TP client for Ubuntu
It's easy enough to get a pptp client going on a Ubuntu 9.04 (Jaunty) desktop:
sudo apt-get install network-manager-pptp
However, I can't seem to find documentation find a corresponding L2TP client ...
- 5,660
5
votes
1
answer
10k
views
Configuring L2TP VPN to use with iOS 14 and macOS Big Sur
After Apple did this in Big Sur OS I can't connect to my own VPN on Libreswan 3.27 (netkey) on 3.10.0-1160.6.1.el7.x86_64
Starting with iOS 14 and macOS Big Sur (coming soon), IPsec supports
HMAC-SHA-...
- 53
5
votes
1
answer
7k
views
VPN server not responding, no indications of blocked traffic
I have a Mac OS X Server (10.9) machine running a L2TP/IPSec VPN server. Configuration appears to be fine, and the hostname of both the server and the VPN is set to a DynDNS hostname. The server is ...
- 757
5
votes
1
answer
7k
views
Setting up site-to-site IPsec in bridged mode
I'd like to set up site-to-site IPsec in bridged mode: that is, where the hosts in each site don't need to be modified to use the IPsec gateway, but the IPsec gateway acts as a pseudowire.
My plan to ...
- 63
4
votes
1
answer
49k
views
How to setup L2TP IPsec VPN server on Windows Server 2008 R2?
The Windows 2008 R2 (SBS) machine was earlier setup to run a PPTP VPN server. Due to security concerns I do want to replace the PPTP by L2TP/IPsec VPN server.
The server is behind a NAT router where ...
- 994
4
votes
3
answers
2k
views
What is difference between L2TP and PPTP?
I need a high performance VPN server, who can tell me the difference between L2TP and PPTP ?
- 4,107
4
votes
3
answers
9k
views
L2TP server allows connections through firewall for iPhone/iPad, but not windows
Our L2TP server (running Windows 2008 RRAS) is behind a NAT firewall. I've already verified that it is passing NAT-T. The firewall rules are all set up correctly to pass GRE, IKE, L2TP and there are ...
- 657
4
votes
2
answers
44k
views
I can connect, but cannot ping/route to remote VPN computers
Setup:
L2TP VPN Server on a Windows Server 2008 machine which is behind a router, which is behind a modem/router.
Modem/Router (IP: 192.168.2.1, Subnet: 255.255.255.0, DHCP serves 192.168.2.2 to ...
- 373
4
votes
1
answer
4k
views
Forwarding VPN via reverse SSH tunnel
I have a server that reverse ssh tunnels to a secondary server. The secondary server then acts as a "bridge" to the internal server (the external server's IP address is what I connect to).
This works ...
- 757
4
votes
1
answer
3k
views
No TCP connections to hosts behind VPN server (SYN, SYN-ACK, but no ACK), UDP, ICMP works
I'm probably doing something incredibly stupid, but I just can't seem to figure out what. Here's what I'm trying to accomplish: I want remote users to be able to log into our network, so I set up a ...
- 43
4
votes
1
answer
3k
views
Configuring OS X L2TP VPN to use Certificate for IPSEC layer instead of Pre Shared Key
I'm trying to setup a L2TP VPN on an OS X Snow Leopard Server setup, and have had success using a pre-shared key, however I would rather not rely on a simple string, and use a certificate instead.
...
- 528
4
votes
2
answers
2k
views
Using Ubuntu Karmic as an L2TP Client for VPN
I'm trying to connect to a VPN service over L2TP using Karmic as a client and it's not working.
The only details I have are the remote IP address, username & password, and a shared secret string; ...
- 6,115
3
votes
1
answer
5k
views
Connected to Windows Server 2016 VPN on AWS but could not ping resources in VPC
I followed this guide to setup a VPN on a Windows Server 2016 instance in EC2 with only a single network interface and an assigned Elastic IP. I was able to connect my macOS to the VPN successfully ...
3
votes
1
answer
2k
views
Juniper SSG 5 VPN
I have a host who set up our Juniper SSG 5 VPN with Firmware version-6.2.0r5.0
I've been trying to set up VPN on it using this guide: http://kb.juniper.net/InfoCenter/index?page=content&id=KB4094
...
- 2,062
3
votes
1
answer
12k
views
IPsec/L2TP VPN with OSX client: xl2tpd reports "maximum retries exceeded"
I'm following this guide for getting an IPsec/L2TP VPN server set up on a Gentoo machine, and I'm having trouble getting an OS X client to connect. From the logs, I believe I'm making an IPsec ...
- 1,158
3
votes
1
answer
799
views
Linux L2TP Daemon Recommendation
I need to setup a tunnel between two points with no encryption. I know this is generally done using L2TP but what would be the recommended daemon to use. I know of rp-l2tp which I have used in the ...
- 388
3
votes
1
answer
2k
views
Windows RRAS VPN failing to set options on Mac L2TP clients due to DHCP relay discarding packets
When setting up an L2TP VPN service for remote access on Windows Routing and Remote Access, we ran into an odd problem with setting options on the connecting clients. The way to provide these ...
- 115k
3
votes
1
answer
5k
views
xl2tpd: Provide L2TP/IPsec VPN connectivity to an entire subnet without using a default route
I've set up an L2TP/IPsec VPN using OpenSwan and xl2tpd using the "nodefaultroute" ppp option. The server's virtual IP address is set to 10.10.31.1 and it allocates addresses in the range 10.10.31.2-...
- 151
3
votes
1
answer
6k
views
Is L2TP preshared key anywhere stored in plaintext on w2k8?
Some time ago I have configured l2tp vpn server on w2k8 rras that uses preshared key. Now I am trying to setup another client but the key that I have documented does not seem to be correct. I have ...
- 2,076
3
votes
2
answers
29k
views
iptables rules to allow L2TP/IPSEC VPN behind firewall
I asked about this on the Smoothwall Express forums but they are understandably reluctant to provide to much help. After all, they really want to sell the commercial version.
I need to provide an ...
- 27.6k
3
votes
1
answer
3k
views
How to stop Windows Filtering Platform blocking ICMP packets for legitimate RDP traffic over L2TP tunnel?
RDP via Windows 2008 L2TP to Windows 10 Pro did never work flawless. The first attempt in September 2018 needed the client Cord.app to be replaced with Royal TSX on OS X 10.9.5. The remote Win10 box ...
- 994
3
votes
1
answer
662
views
strongSwan 5.6.2 and xl2tp 1.3.12 on Ubuntu 18.04 SA established but no traffic
Since updating strongSwan and xl2tpd to the latest versions available for Ubuntu I encounter a problem with ESP and AH in L2TP.
Server config:
Interface for generating traffic
ens224: flags=4163<...
- 31
3
votes
1
answer
2k
views
L2TP VPN Connection on Debian Squeeze
I need to make an L2TP VPN connection from a Debian Squeeze server.
What I have is:
The server IP address
Shared Key
My username and password
Just using these 3 parameteres I can establish the VPN ...
- 183
3
votes
1
answer
9k
views
Cisco ASA 5505 - L2TP over IPsec
I have followed this document on cisco site to set up the L2TP over IPsec connection.
When I try to establish a VPN to ASA 5505 from my Windows XP, after I click on "connect" button, the "Connecting ....
- 223
3
votes
1
answer
2k
views
Cant connect to VPN via L2TP/IPsec on mac, but connection on windows works
I've setup connection on one of our mac computers running MacOS 10.13.6 High Sierra. I've entered user, password, preshared key ect. but I Cant connect to VPN (getting VPN server did not respond error)...
- 31
3
votes
0
answers
3k
views
No internet access through L2TP/Ipsec using Ubuntu 18.04 - Routing table
I have set up a VPN network using the package https://github.com/nm-l2tp/NetworkManager-l2tp.
The VPN works well (on certain situations) but I think there's a problem with the routing.
When I'm not ...
3
votes
0
answers
2k
views
L2TP ipsec using network-manager-l2tp and strongswan ubuntu 18.04
The VPN works flawlessly on OSX and Windows 10 but no luck with ubuntu
VPN gets connected on ubuntu using
Phase1 Algorithms : 3des-sha1-modp1024
Phase2 Algorithms : 3des-sha1
And in 10 seconds ...
- 133
3
votes
0
answers
889
views
Can't access remote shares on L2TP VPN
I've set up a L2TP VPN for my (Microsoft Surface Pro 4) tablet when I am at work so I can still access my files on my local server.
However when I'm connected to the VPN I can't seem to access my ...
- 31
3
votes
1
answer
6k
views
L2TP over IPSec VPN (OpenSwan, CentOS 6) unable to connect via iPhone (iOS 5.1) and Android (JellyBean)
I have successfully installed L2TP over IPsec VPN (PSK) using OpenSwan 2.6.38 running on CentOS.
Connect DOES WORK perfectly from Windows 8.
But doesn't work AT ALL from iPhone 4 (ios 5.1) or ...
- 61
2
votes
3
answers
8k
views
PFsense VPN all types failing?
I am trying to configure a new PFsense router (64 bit) and am trying to to get the VPN functions working.
I have enabled PPTP, L2TP and IPSec. I've added allow all rules to all LAN's, WAN's and each ...
- 2,727
2
votes
1
answer
4k
views
Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service
We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
- 843
2
votes
1
answer
5k
views
Softether vpn ufw firewall config - is it correct?
I've correctly installed and configured Softether on my Ubuntu 14 x64 VPS in local bridge mode with a virtual TAP interface.
What I have now is a fully functioning L2TP/IPSEC server with two network ...
- 183
2
votes
2
answers
3k
views
L2TP VPN routing issue with iphone/ipad
I am able to connect to our company's VPN with L2TP on the iphone and ipad, however, I can only get to certain resources in our company network but not others.
After looking at the iOS device logs ...
- 4,024
2
votes
1
answer
6k
views
Windows VPN client - how to make it connect to a different port?
I have a L2TP/IPsec server setup on a CentOS box that I am using for multiple purposes, and I wish some clients connect one way, other clients connect the other way, and get different sets of ...
- 814
2
votes
2
answers
15k
views
Cannot connect to my L2TP IPSec VPN
I am trying to get my VPN (L2TP IPSec PSK) to work. I have a Synology NAS where I have setup everything as it says on the Synology support page.
In my Asus RT-N66U router I have opened UDP ports 500,...
- 441
2
votes
1
answer
13k
views
openswan and xl2tpd tunnel not working?
Since weeks i want to setup l2tp tunnel with xl2tpd and openswan in debian wheezy, the external interface is ppp0 with dynamic ip and the internal interface is eth0 with ip address 192.168.1.1.
l2tp ...
- 21
2
votes
1
answer
406
views
Packet flooding while configuring a Debian L2TP/IPSec client?
I'm currently at my wits end trying to configure an L2TP over IPSec VPN connection on my Debian using openswan and xl2tp box connecting to a server of unknown configuration.
I've managed to ...
- 41
2
votes
1
answer
6k
views
Pfsense IPsec VPN not listening on port 500?
I am trying to setup a home VPN with IPsec as I have read about PPTP having some security problems and being outdated. I found an article on the web that shows you how to setup an IPsec VPN here which ...
- 273
2
votes
1
answer
1k
views
L2TP and multiple interfaces on the machine
We have setup ipsec and l2tp on linux. One question came up (due to firewall management policy) is whether it's possible to have 1 virtual interface instead of one per connected client.
Now we have:
...
- 1,868
2
votes
2
answers
10k
views
Is there any L2TP client without IPsec?
I want to use L2TP to through NAT, but i do not need IPsec, because IPsec waste much CPU. I can setup one L2TP server on linux, so is there any L2TP windows client without IPsec ?
- 4,107
2
votes
1
answer
3k
views
how i can use windows vpn connection file in ubuntu?
i have a windows vpn. how i can use this vpn in Ubuntu 10.04. i don't what's this vpn gateway or other configuration items.
my VPN file content is:
[usa]
Encoding=1
Type=2
AutoLogon=0
...
- 145
2
votes
1
answer
2k
views
OpenSwan + xl2tpd VPN: How can I share Internet connection
I have an OpenSwan IPSec + L2TP VPN on Linux setup working from off of my server so I can connect to it from my laptop (roadwarrior setup). I am able to connect to the VPN remotely just fine, however ...
- 303
2
votes
3
answers
15k
views
Why does VNC viewer on Mac Book Pro report RFB protocol error when connecting to AWS over L2TP?
There is a small group of us working on Amazon Web Services (AWS), we use mac books as our desktop machines and VNC into servers running on AWS. The problem started when we upgraded our VPN from PPTP ...
2
votes
1
answer
1k
views
VPN for Video stream
I work at a digital TV broadcast company (cable), we have 2 head ends, one in the US and one in the Caribbean, we currently connect both sites with a cisco L2TPv3 pseudowire VPN between both sites, ...
- 145