Difference between revisions of "L2TP configuration examples RutOS"
PauliusRug (talk | contribs) |
|||
(One intermediate revision by one other user not shown) | |||
Line 11: | Line 11: | ||
'''Prerequisites''': | '''Prerequisites''': | ||
− | *Two RUTxxx routers of any type | + | *Two RUTxxx routers of any type |
*A SIM card with a Public Static or Public Dynamic IP address for the L2TP Server | *A SIM card with a Public Static or Public Dynamic IP address for the L2TP Server | ||
*An end device (PC, Laptop, Tablet, Smartphone) to configure the routers | *An end device (PC, Laptop, Tablet, Smartphone) to configure the routers | ||
Line 31: | Line 31: | ||
---- | ---- | ||
− | + | <table class="nd-othertables_2"> | |
+ | <tr> | ||
+ | <th width=355; style="border-bottom: 1px solid white;></th> | ||
+ | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> [[File:RutOS_L2TP_IPsec_VPN_7,8_add_L2TP_Server.png|770px|right]]</th> | ||
+ | </tr> | ||
+ | <tr> | ||
+ | <td style="border-bottom: 1px solid white;> | ||
+ | Login to the router's WebUI and navigate to the '''Services → VPN → L2TP''' page and do the following: | ||
+ | <ol> | ||
+ | <li>Select '''Role: Server'''.</li> | ||
+ | <li>Enter a '''custom configuration name'''.</li> | ||
+ | <li>Click the '''Add''' button. You will be prompted to the configuration window</li> | ||
+ | </ol> | ||
+ | </td> | ||
+ | </tr> | ||
+ | </table> | ||
− | |||
---- | ---- | ||
− | + | <table class="nd-othertables_2"> | |
+ | <tr> | ||
+ | <th width=355; style="border-bottom: 1px solid white;></th> | ||
+ | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:RutOS_L2TP_IPsec_VPN_7,8_add_L2TP_Server_config.png|770px|right]]</th> | ||
+ | </tr> | ||
+ | <tr> | ||
+ | <td style="border-bottom: 1px solid white> | ||
+ | <ol> | ||
+ | <li>'''Enable''' the L2TP instance.</li> | ||
+ | <li>Click on the '''Add''' button to add a new user</li> | ||
+ | <li>Enter a '''User name''' and '''Password''' for authentication for the client.</li> | ||
+ | <li>Optionally, set a fixed IP for this client (if left empty, the client will receive the first free IP from the IP range).</li> | ||
+ | <li>Don't forget to '''Save''' the changes.</li> | ||
+ | </ol> | ||
+ | </td> | ||
+ | </tr> | ||
+ | </table> | ||
− | + | ===L2TP Client (RUT2)=== | |
---- | ---- | ||
− | * | + | *Now let's configure the L2TP '''Client'''. |
− | |||
− | |||
− | |||
− | + | <table class="nd-othertables_2"> | |
+ | <tr> | ||
+ | <th width=355; style="border-bottom: 1px solid white;></th> | ||
+ | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> [[File:RutOS_L2TP_IPsec_VPN_7,8_1.png|770px|right]]</th> | ||
+ | </tr> | ||
+ | <tr> | ||
+ | <td style="border-bottom: 1px solid white;> | ||
+ | Login to the router's WebUI and navigate to the '''Services → VPN → L2TP''' page and do the following: | ||
+ | <ol> | ||
+ | <li>Select '''Role: Client'''.</li> | ||
+ | <li>Enter a '''custom configuration name'''.</li> | ||
+ | <li>Click the '''Add''' button. You will be prompted to the configuration window</li> | ||
+ | </ol> | ||
+ | </td> | ||
+ | </tr> | ||
+ | </table> | ||
− | |||
---- | ---- | ||
− | + | <table class="nd-othertables_2"> | |
− | + | <tr> | |
− | + | <th width=355; style="border-bottom: 1px solid white;></th> | |
− | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:RutOS_L2TP_IPsec_VPN_7,8_2.png|770px|right]]</th> | |
+ | </tr> | ||
+ | <tr> | ||
+ | <td style="border-bottom: 1px solid white> | ||
+ | <ol> | ||
+ | <li>'''Enable''' the L2TP instance.</li> | ||
+ | <li>Enter the '''Public IP''' of RUT1</li> | ||
+ | <li>Enter the '''Username''' that we created on RUT1</li> | ||
+ | <li>Enter the '''Password''' that we created on RUT1</li> | ||
+ | <li>Don't forget to '''Save''' the changes.</li> | ||
+ | </ol> | ||
+ | </td> | ||
+ | </tr> | ||
+ | </table> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | *''' | + | *'''Note:''' ''if you plan on using the server as a web proxy, you should also enable the '''Default route''' option in the client's configuration.'' |
− | |||
==Testing the setup== | ==Testing the setup== | ||
Line 81: | Line 128: | ||
*[[L2TP over IPsec]] | *[[L2TP over IPsec]] | ||
*Other types of VPNs suported by RUTxxx devices: | *Other types of VPNs suported by RUTxxx devices: | ||
− | **[[OpenVPN configuration examples | + | **[[OpenVPN configuration examples|OpenVPN configuration examples]] |
**[[IPsec RUTOS configuration example|IPsec configuration examples]] | **[[IPsec RUTOS configuration example|IPsec configuration examples]] | ||
**[[GRE Tunnel configuration examples RutOS|GRE Tunnel configuration examples]] | **[[GRE Tunnel configuration examples RutOS|GRE Tunnel configuration examples]] | ||
**[[PPTP configuration examples RutOS|PPTP configuration examples]] | **[[PPTP configuration examples RutOS|PPTP configuration examples]] | ||
− | [[Category: | + | [[Category:VPN]] |
Latest revision as of 12:13, 20 August 2024
Main Page > General Information > Configuration Examples > VPN > L2TP configuration examples RutOSIntroduction
Layer 2 Tunneling Protocol (L2TP) is a tunneling protocol used to support virtual private networks (VPNs) or as part of the delivery of services by ISPs. It does not provide any encryption or confidentiality by itself. Rather, it relies on an encryption protocol that it passes within the tunnel to provide privacy.
This article provides an extensive configuration example with details on how to create a connection between an L2TP Server and a Client, both of which are configured on RUTxxx routers. If you wish to learn how to encrypt the traffic of your L2TP tunnel, we suggest you take a look at our L2TP over IPsec article.
Configuration overview and prerequisites
Before we begin, let's overview the configuration that we are attempting to achieve and the prerequisites that make it possible.
Prerequisites:
- Two RUTxxx routers of any type
- A SIM card with a Public Static or Public Dynamic IP address for the L2TP Server
- An end device (PC, Laptop, Tablet, Smartphone) to configure the routers
Configuration scheme:
As indicated by the figure above, the configuration we are trying to achieve here is very basic: it concerns two RUTxxx routers - RUT1 and RUT2. One functions as an L2TP Server, and the other - is an L2TP Client. They are connected to a virtual network via an L2TP Tunnel.
Router configuration
If you have familiarized yourself with the configuration scheme and have all of the devices in order, we can start configuring the routers using the instructions provided in this section.
L2TP Server (RUT1)
As mentioned in the prerequisites section, the router that acts as the server must have a Public Static or Public Dynamic IP address (more information on the subject can be found here). If that is in order, we should start configuring the server.
Login to the router's WebUI and navigate to the Services → VPN → L2TP page and do the following:
|
|
L2TP Client (RUT2)
- Now let's configure the L2TP Client.
Login to the router's WebUI and navigate to the Services → VPN → L2TP page and do the following:
|
|
- Note: if you plan on using the server as a web proxy, you should also enable the Default route option in the client's configuration.
Testing the setup
If you've followed all the steps presented above, your configuration should be finished. But as with any other configuration, it is always wise to test the setup in order to make sure that it works properly. In order to test an L2TP connection, login to one of the routers' WebUIs and go to Services → CLI. Login with user name: root and the router's admin password. You should then be able to ping the opposite instance, i.e., if you logged in to the server's CLI, you should be able to ping the client's virtual IP address, and vice versa. To use a ping command, type ping <ip_address> and press the "Enter" key on your keyboard:
If the ping requests are successful, congratulations, your setup works! If not, we suggest that you review all the steps once more.
If you're using the server as a web proxy, end devices connected to the L2TP client router should have the Public IP address of the L2TP server. You can visit this website to check the Public IP address: http://www.whatsmyip.org/
See also
- L2TP over IPsec
- Other types of VPNs suported by RUTxxx devices: