Difference between revisions of "Configuring clients to access internet through office's gateway from home using VPN"
PauliusRug (talk | contribs) |
|||
(One intermediate revision by one other user not shown) | |||
Line 27: | Line 27: | ||
==Configuring HQ corporation router== | ==Configuring HQ corporation router== | ||
===L2TP=== | ===L2TP=== | ||
− | + | ---- | |
<table class="nd-othertables_2"> | <table class="nd-othertables_2"> | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> [[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> [[File:Networking_rutx_configuration_examples_l2tp_over_ipsec_windows_10_1_v1.png|770px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 40: | Line 40: | ||
<li>Select '''Role: Server'''.</li> | <li>Select '''Role: Server'''.</li> | ||
<li>Enter a '''custom configuration name'''.</li> | <li>Enter a '''custom configuration name'''.</li> | ||
− | <li>Click the '''Add''' button. | + | <li>Click the '''Add''' button.</li> |
+ | <li>Click the '''Edit''' button next to the newly created L2TP instance.</li> | ||
</ol> | </ol> | ||
</td> | </td> | ||
Line 51: | Line 52: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_examples_l2tp_over_ipsec_windows_10_2_v1.png|770px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 57: | Line 58: | ||
<ol> | <ol> | ||
<li>'''Enable''' the L2TP instance.</li> | <li>'''Enable''' the L2TP instance.</li> | ||
− | |||
<li>Enter a '''User name''' and '''Password''' for authentication for the client.</li> | <li>Enter a '''User name''' and '''Password''' for authentication for the client.</li> | ||
− | <li> | + | <li>Optionaly, set a fixed IP for this client (if left empty, client will receive first free IP from the IP range).</li> |
<li>Don't forget to '''Save''' the changes.</li> | <li>Don't forget to '''Save''' the changes.</li> | ||
</ol> | </ol> | ||
Line 72: | Line 72: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_examples_l2tp_over_ipsec_windows_10_3_v1.png|770px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 79: | Line 79: | ||
<ol> | <ol> | ||
<li>Enter a custom name for the IPsec instance.</li> | <li>Enter a custom name for the IPsec instance.</li> | ||
− | <li>Click the '''Add''' button. | + | <li>Click the '''Add''' button.</li> |
+ | <li>Click the '''Edit''' button next to the newly created instance.</li> | ||
</ol> | </ol> | ||
</td> | </td> | ||
Line 90: | Line 91: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_examples_l2tp_over_ipsec_windows_10_4_v1.png|770px|right]]</th> |
− | + | </tr> | |
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
Line 98: | Line 99: | ||
<li>'''Enable''' the instance.</li> | <li>'''Enable''' the instance.</li> | ||
<li>Enter your '''Pre-shared key'''.</li> | <li>Enter your '''Pre-shared key'''.</li> | ||
+ | <li>Select '''Type: Transport'''.</li> | ||
+ | <li>'''Save''' changes.</li> | ||
</ol> | </ol> | ||
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
+ | |||
+ | ===Firewall=== | ||
+ | ---- | ||
+ | |||
+ | <table class="nd-othertables_2"> | ||
+ | <tr> | ||
+ | <th width=355; style="border-bottom: 1px solid white;></th> | ||
+ | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_examples_l2tp_over_ipsec_windows_10_5_v1.png|770px|right]]</th> | ||
+ | </tr> | ||
+ | <tr> | ||
+ | <td style="border-bottom: 1px solid white> | ||
+ | Go to the '''Network → Firewall → General Settings''' and press edit next to the L2TP zone forwarding rule: | ||
+ | </td> | ||
+ | </tr> | ||
+ | </table> | ||
+ | |||
+ | ---- | ||
+ | |||
<table class="nd-othertables_2"> | <table class="nd-othertables_2"> | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_examples_l2tp_over_ipsec_windows_10_6_v1.png|770px|right]]</th> |
− | + | </tr> | |
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | Allow L2TP forward to/from '''WAN''' and click the '''Save & Apply''' button: | |
− | + | ||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
Line 199: | Line 217: | ||
</tr> | </tr> | ||
</table> | </table> | ||
− | [[Category: | + | [[Category:Configuration Examples]] |
Revision as of 15:59, 1 August 2023
Main Page > General Information > Configuration Examples > Use cases > Configuring clients to access internet through office's gateway from home using VPN
|
Configuration overview and prerequisites
Prerequisites:
- One Teltonika Networks router (In this article RUTX11 will be used)
- A Public Static or Public Dynamic IP addresses
- At least one end device with Windows 10
The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address (RUTX11) acts as the L2TP/IPsec server and the Windows 10 device acts as client. L2TP connects the networks of RUTX11 and Windows 10 client, IPsec provides the encryption for the L2TP tunnel.
When the scheme is realized, home workers will be able to reach corporation’s internal network with all internal systems, allowing working from home to be possible. All of the home workers LAN and WAN traffic is going to go through that tunnel.
Configuring HQ corporation router
L2TP
Login to the router's WebUI and navigate to the Services → VPN → L2TP page and do the following:
|
|
IPsec
Go to the Services → VPN → IPsec page and do the following:
|
In the IPsec Configuration page, do the following (and leave the rest as defaults, unless your specific configuration requires otherwise):
|
Firewall
Go to the Network → Firewall → General Settings and press edit next to the L2TP zone forwarding rule: |
Allow L2TP forward to/from WAN and click the Save & Apply button: |
Home worker’s computer
Type VPN settings in the Windows search bar: |
Click the Add a VPN connection button: |
Configure the following parameters:
|
After you are redirected back to the VPN settings page, locate your new connection and click the Connect button. If the connection was successful, you should see the word "connected" appear under the connection name: |
Results
Home worker should now be able to access HQ network resources. To verify the connection you can ping some internal HQ server and if you get a reply, you have successfully connected to HQ‘s internal network. |