Hot answers tagged

4 votes
Accepted

strongSwan + xl2tpd VPN server: how to configure several config files?

Don't use the aggressive mode, the connection will be less secure. Anyway try with this configuration. I use it on a my VPN Server with strongswan-5.3.5 and xl2tpd-1.3.6 ipsec.conf config setup ...
user avatar
  • 348
3 votes

Seeing Who is Logged into LibreSwan VPN

In case anyone else comes across this, here is the script I ended up using. It searches /var/log/messages for log in messages, then checks if the PID is still in use by pppd. It outputs just the ...
user avatar
  • 171
2 votes

IPSec + L2TP + NAT-Traversal does not work for multiple clients behind same nat

IPSEC is very sensitive to NATted clients. You need to read about how to enable NAT traversal features on both clients and server. Out of the box it may detect only the public IP of the NATted clients ...
user avatar
  • 161
1 vote

IDir '193.174.193.64' does not match to 'vpngw.fh-kempten.de

The remote identity the server returns does not match your configuration (the identities default to the IP addresses). Try configuring rightid = vpngw.fh-kempten.de and you might have to configure ...
user avatar
  • 3,650
1 vote
Accepted

strongSwan 5.6.2 and xl2tp 1.3.12 on Ubuntu 18.04 SA established but no traffic

There is a known bug in Linux kernel 4.15, which Ubuntu 18.04 ships, that causes the IP address to change in this way. It was caused by 5efec5c655dd ("xfrm: Fix eth_hdr(skb)->h_proto to reflect inner ...
user avatar
  • 3,650
1 vote

ubuntu 16.04 l2tp over ipsec

Disclosure: I am the author of the GitHub repository you linked to. The Linux client setup instructions have been re-written on 10/19/2016. Check out the updated instructions at: https://github.com/...
user avatar
  • 151
1 vote

How to proxy a l2tp server?

I highly doubt this is possible. L2tp works over udp/1701, and it's not proxiable. Furthermore, you don't need to proxy it, because pure l2tp is perfectly able to cross NATs. After all, your request ...
user avatar
  • 7,954
1 vote

How to deny connections to xl2tp without ipsec encryption?

I've posted this question to xl2tpd team on GitHub, this is the answer (checked and worked on my setup): You can use the iptables policy module like this: iptables -A INPUT -p udp --dport 1701 -m ...
user avatar
1 vote
Accepted

Clients cannot connect to L2TP server on Ubuntu 12.04 & 14.04 LTS

For Windows users, a registry change is required to be able to connect to an IPsec/L2TP VPN behind NAT (e.g. in EC2). Please follow these instructions. Scroll down to the bottom to view separate steps ...
user avatar
  • 171
1 vote

Openswan + xl2tpd connections time out after a while

In your /etc/ppp/options.xl2tpd file you have 'idle 1800', that is 30 minutes. You could try setting that value to a higher number or do something terrible like the following: while true; do echo "c ...
user avatar
  • 11

Only top scored, non community-wiki answers of a minimum length are eligible