Difference between revisions of "Template:Networking rutos configuration example l2tp over ipsec android"
(50 intermediate revisions by the same user not shown) | |||
Line 3: | Line 3: | ||
<th width=325; style="border-bottom: 1px solid white;></th> | <th width=325; style="border-bottom: 1px solid white;></th> | ||
<th width=820; style="border-bottom: 1px solid white;" rowspan=2;> | <th width=820; style="border-bottom: 1px solid white;" rowspan=2;> | ||
− | [[File: | + | [[File:Networking_RUTX_VPN_between_HQ_topology_v3.png|border|class=tlt-border|750px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 21: | Line 21: | ||
* At least one Android device | * At least one Android device | ||
− | The topology above depicts the L2TP/IPsec scheme. The router with the Public IP address (''' | + | The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address ('''''RUTX11''''') acts as the '''L2TP/IPsec server''' and the '''Android device''' acts as '''client'''. L2TP connects the networks of '''RUTX11''' and '''Android client''', IPsec provides the encryption for the L2TP tunnel. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds. |
− | When the scheme is realized, you will be able to | + | When the scheme is realized, you will be able to reach your home internal network with all internal systems, cameras, or other IOT devices, from anywhere in the world. |
==Configuring home router (RUTX)== | ==Configuring home router (RUTX)== | ||
Line 33: | Line 33: | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
<th width=790; style="border-bottom: 1px solid white;" rowspan=2> | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> | ||
− | [[File: | + | [[File:Networking rutos configuration example l2tp over ipsec android 1 v1.png|770px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white;> | <td style="border-bottom: 1px solid white;> | ||
− | Login to the router's WebUI | + | Login to the router's WebUI and navigate to the '''Services → VPN → L2TP''' page and do the following: |
<ol> | <ol> | ||
+ | <li>Select '''Role: Server'''.</li> | ||
<li>Enter a '''custom configuration name'''.</li> | <li>Enter a '''custom configuration name'''.</li> | ||
− | |||
<li>Click the '''Add''' button.</li> | <li>Click the '''Add''' button.</li> | ||
<li>Click the '''Edit''' button next to the newly created L2TP instance.</li> | <li>Click the '''Edit''' button next to the newly created L2TP instance.</li> | ||
Line 54: | Line 54: | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
<th width=790; style="border-bottom: 1px solid white;" rowspan=2> | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> | ||
− | [[File: | + | [[File:Networking rutos configuration example l2tp over ipsec android 2 v1.png|770px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 60: | Line 60: | ||
<ol> | <ol> | ||
<li>'''Enable''' the L2TP instance.</li> | <li>'''Enable''' the L2TP instance.</li> | ||
− | <li>Enter a ''' | + | <li>Enter a '''User name''' and '''Password''' for authentication for the client.</li> |
− | <li> | + | <li>Optionaly, set a fixed IP for this client (if left empty, client will receive first free IP from the IP range).</li> |
<li>Don't forget to '''Save''' the changes.</li> | <li>Don't forget to '''Save''' the changes.</li> | ||
</ol> | </ol> | ||
Line 75: | Line 75: | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
<th width=790; style="border-bottom: 1px solid white;" rowspan=2> | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> | ||
− | [[File: | + | [[File:Networking rutos configuration example l2tp over ipsec android 3 v1.png|770px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 81: | Line 81: | ||
Go to the '''Services → VPN → IPsec''' page and do the following: | Go to the '''Services → VPN → IPsec''' page and do the following: | ||
<ol> | <ol> | ||
− | <li>Enter a custom | + | <li>Enter a custom name for the IPsec instance.</li> |
<li>Click the '''Add''' button.</li> | <li>Click the '''Add''' button.</li> | ||
<li>Click the '''Edit''' button next to the newly created instance.</li> | <li>Click the '''Edit''' button next to the newly created instance.</li> | ||
Line 95: | Line 95: | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
<th width=790; style="border-bottom: 1px solid white;" rowspan=2> | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> | ||
− | [[File: | + | [[File:Networking rutos configuration example l2tp over ipsec android 4 v1.png|770px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 104: | Line 104: | ||
<li>Enter your '''Pre-shared key'''.</li> | <li>Enter your '''Pre-shared key'''.</li> | ||
<li>Select '''Type: Transport'''.</li> | <li>Select '''Type: Transport'''.</li> | ||
− | |||
− | |||
<li>'''Save''' changes.</li> | <li>'''Save''' changes.</li> | ||
</ol> | </ol> | ||
Line 112: | Line 110: | ||
</table> | </table> | ||
− | === | + | ==Android phone== |
+ | |||
+ | <table class="nd-othertables_2"> | ||
+ | <tr> | ||
+ | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
+ | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | ||
+ | [[File:Networking rutos configuration example l2tp over ipsec android 5 v1.png|border|class=tlt-border|300px|center]]</th> | ||
+ | </tr> | ||
+ | <tr> | ||
+ | <td style="border-bottom: 1px solid white> | ||
+ | Type '''VPN settings''' in the Windows search bar: | ||
+ | </td> | ||
+ | </tr> | ||
+ | </table> | ||
+ | |||
+ | ---- | ||
+ | |||
+ | <table class="nd-othertables_2"> | ||
+ | <tr> | ||
+ | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
+ | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | ||
+ | [[File:Networking rutos configuration example l2tp over ipsec android 6 v1.png|border|class=tlt-border|300px|center]]</th> | ||
+ | </tr> | ||
+ | <tr> | ||
+ | <td style="border-bottom: 1px solid white> | ||
+ | Click the '''Add a VPN connection''' button: | ||
+ | </td> | ||
+ | </tr> | ||
+ | </table> | ||
+ | |||
---- | ---- | ||
<table class="nd-othertables_2"> | <table class="nd-othertables_2"> | ||
<tr> | <tr> | ||
− | <th width= | + | <th width=525; style="border-bottom: 1px solid white;"></th> |
− | <th width= | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_8_v2.png|border|class=tlt-border|550px|right]]</th> |
− | [[File: | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | Configure the following parameters: | |
+ | <ol> | ||
+ | <li>Select '''VPN provider: Windows (built-in)'''.</li> | ||
+ | <li>Enter a custom '''Connection name'''.</li> | ||
+ | <li>Enter the router's WAN IP address into the '''Server name or address''' field.</li> | ||
+ | <li>Select '''VPN type: L2TP/IPsec with pre-shared key'''.</li> | ||
+ | <li>Enter the '''Pre-shared key''' exactly as it was specified on the router.</li> | ||
+ | <li>Select '''Type of sign-in info: User name and password'''.</li> | ||
+ | <li>Enter the '''User name''' and '''Password''' exactly as they were specified on the router.</li> | ||
+ | <li>Click '''Save'''</li> | ||
+ | </ol> | ||
</td> | </td> | ||
</tr> | </tr> | ||
Line 132: | Line 168: | ||
<table class="nd-othertables_2"> | <table class="nd-othertables_2"> | ||
<tr> | <tr> | ||
− | <th width= | + | <th width=525; style="border-bottom: 1px solid white;"></th> |
− | <th width= | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_11_v2.png|border|class=tlt-border|550px|right]]</th> |
− | [[File: | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | Type '''Network Connections''' in the Windows search bar: | |
− | |||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
− | + | ---- | |
<table class="nd-othertables_2"> | <table class="nd-othertables_2"> | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;"></th> | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_12_v2.png|border|class=tlt-border|550px|right]]</th> |
− | [[File: | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | Press right mouse click on your newly created VPN instance and select '''Properties''': | |
</td> | </td> | ||
</tr> | </tr> | ||
Line 167: | Line 197: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;"></th> | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_13_v2.png|border|class=tlt-border|550px|right]]</th> |
− | [[File: | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | Navigate to '''Networking''' section and double click '''Internet Protocol Version 4 (TCP/IPv4)''': | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
Line 188: | Line 211: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;"></th> | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_14_v2.png|border|class=tlt-border|550px|right]]</th> |
− | [[File: | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | Go to '''Advanced''' settings: | |
− | |||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
Line 207: | Line 225: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;"></th> | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_15_v2.png|border|class=tlt-border|550px|right]]</th> |
− | [[File: | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | Now | + | Now disable '''Use default gateway on remote network''' and save settings: |
− | |||
− | |||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
Line 227: | Line 239: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;"></th> | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_9_v2.png|border|class=tlt-border|550px|right]]</th> |
− | [[File: | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | If | + | Go back to the VPN settings page, locate your new connection and click the '''Connect''' button. If the connection was successful, you should see the word '''"Connected"''' appear under the connection name: |
</td> | </td> | ||
</tr> | </tr> | ||
Line 242: | Line 253: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_10_v2.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | Home worker should now be able to access HQ network resources. | |
− | To verify the connection you can | + | To verify the connection you can ping some internal HQ server and if you get a reply, you have successfully connected to HQ‘s internal network. |
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− |
Revision as of 17:58, 22 May 2020
|
Configuration overview and prerequisites
Prerequisites:
- One RUTX router of any type
- A Public Static or Public Dynamic IP address
- At least one Android device
The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address (RUTX11) acts as the L2TP/IPsec server and the Android device acts as client. L2TP connects the networks of RUTX11 and Android client, IPsec provides the encryption for the L2TP tunnel. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds.
When the scheme is realized, you will be able to reach your home internal network with all internal systems, cameras, or other IOT devices, from anywhere in the world.
Configuring home router (RUTX)
L2TP
Login to the router's WebUI and navigate to the Services → VPN → L2TP page and do the following:
|
|
IPsec
Go to the Services → VPN → IPsec page and do the following:
|
In the IPsec Configuration page, do the following (and leave the rest as defaults, unless your specific configuration requires otherwise):
|
Android phone
Type VPN settings in the Windows search bar: |
Click the Add a VPN connection button: |
Configure the following parameters:
|
Type Network Connections in the Windows search bar: |
Press right mouse click on your newly created VPN instance and select Properties: |
Navigate to Networking section and double click Internet Protocol Version 4 (TCP/IPv4): |
Go to Advanced settings: |
Now disable Use default gateway on remote network and save settings: |
Go back to the VPN settings page, locate your new connection and click the Connect button. If the connection was successful, you should see the word "Connected" appear under the connection name: |
Results
Home worker should now be able to access HQ network resources. To verify the connection you can ping some internal HQ server and if you get a reply, you have successfully connected to HQ‘s internal network. |