Difference between revisions of "Template:Networking rutos configuration example l2tp over ipsec android"
(→IPsec) |
|||
(38 intermediate revisions by one other user not shown) | |||
Line 3: | Line 3: | ||
<th width=325; style="border-bottom: 1px solid white;></th> | <th width=325; style="border-bottom: 1px solid white;></th> | ||
<th width=820; style="border-bottom: 1px solid white;" rowspan=2;> | <th width=820; style="border-bottom: 1px solid white;" rowspan=2;> | ||
− | [[File: | + | [[File:Networking_RUTX_VPN_between_HQ_topology_v3.png|border|class=tlt-border|750px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 21: | Line 21: | ||
* At least one Android device | * At least one Android device | ||
− | The topology above depicts the L2TP/IPsec scheme. The router with the Public IP address (''' | + | The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address ('''''RUTX11''''') acts as the '''L2TP/IPsec server''' and the '''Android device''' acts as '''client'''. L2TP connects the networks of '''RUTX11''' and '''Android client''', IPsec provides the encryption for the L2TP tunnel. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds. |
− | When the scheme is realized, you will be able to | + | When the scheme is realized, you will be able to reach your home internal network with all internal systems, cameras, or other IOT devices, from anywhere in the world. |
==Configuring home router (RUTX)== | ==Configuring home router (RUTX)== | ||
− | |||
===L2TP=== | ===L2TP=== | ||
− | + | ---- | |
<table class="nd-othertables_2"> | <table class="nd-othertables_2"> | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> [[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
+ | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_1_v1.png|770px|right]]</th> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 39: | Line 39: | ||
Login to the router's WebUI and navigate to the '''Services → VPN → L2TP''' page and do the following: | Login to the router's WebUI and navigate to the '''Services → VPN → L2TP''' page and do the following: | ||
<ol> | <ol> | ||
+ | <li>Enter a '''custom configuration name'''.</li> | ||
<li>Select '''Role: Server'''.</li> | <li>Select '''Role: Server'''.</li> | ||
− | <li> | + | <li>Click the '''Add''' button.</li> |
− | <li>Click the ''' | + | <li>Click the '''Edit''' button next to the newly created L2TP instance.</li> |
</ol> | </ol> | ||
</td> | </td> | ||
Line 52: | Line 53: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
+ | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_2_v1.png|770px|right]]</th> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 58: | Line 60: | ||
<ol> | <ol> | ||
<li>'''Enable''' the L2TP instance.</li> | <li>'''Enable''' the L2TP instance.</li> | ||
− | + | <li>Enter a '''User name''' and '''Password''' which later will be used for client authentication.</li> | |
− | <li>Enter a '''User name''' and '''Password''' for authentication | + | <li>Optionaly, set a fixed IP for this client (if left empty, client will receive first free IP from the IP range).</li> |
− | <li> | ||
<li>Don't forget to '''Save''' the changes.</li> | <li>Don't forget to '''Save''' the changes.</li> | ||
</ol> | </ol> | ||
Line 73: | Line 74: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
+ | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_3_v1.png|770px|right]]</th> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 79: | Line 81: | ||
Go to the '''Services → VPN → IPsec''' page and do the following: | Go to the '''Services → VPN → IPsec''' page and do the following: | ||
<ol> | <ol> | ||
− | <li>Enter a custom | + | <li>Enter a custom '''Name''' for the IPsec instance.</li> |
− | <li>Click the '''Add''' button. | + | <li>Click the '''Add''' button.</li> |
+ | <li>Click the '''Edit''' button next to the newly created instance.</li> | ||
</ol> | </ol> | ||
</td> | </td> | ||
Line 91: | Line 94: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
− | + | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_4_v1.png|770px|right]]</th> | |
+ | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
Line 99: | Line 103: | ||
<li>'''Enable''' the instance.</li> | <li>'''Enable''' the instance.</li> | ||
<li>Enter your '''Pre-shared key'''.</li> | <li>Enter your '''Pre-shared key'''.</li> | ||
− | < | + | <li>Select '''Type: Transport'''.</li> |
− | + | <li>Set '''DH group''' to '''MODP1024'''.</li> | |
− | + | <li>Go to '''Phase 2''' settings and also set '''DH group''' to '''MODP1024'''.</li> | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | </ | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
<li>'''Save''' changes.</li> | <li>'''Save''' changes.</li> | ||
</ol> | </ol> | ||
Line 185: | Line 122: | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | Go to your Android device '''VPN settings''' and create | + | Go to your Android device '''VPN settings''' and create new VPN configuration: |
</td> | </td> | ||
</tr> | </tr> | ||
Line 196: | Line 133: | ||
<th width=525; style="border-bottom: 1px solid white;"></th> | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
<th width=620; style="border-bottom: 1px solid white;" rowspan=2> | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | ||
− | [[File: | + | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_6_v2.png|border|class=tlt-border|300px|center]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 217: | Line 154: | ||
<th width=525; style="border-bottom: 1px solid white;"></th> | <th width=525; style="border-bottom: 1px solid white;"></th> | ||
<th width=620; style="border-bottom: 1px solid white;" rowspan=2> | <th width=620; style="border-bottom: 1px solid white;" rowspan=2> | ||
− | [[File: | + | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_7_v2.png|border|class=tlt-border|300px|center]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
+ | Configure the following parameters: | ||
<ol> | <ol> | ||
<li>Write the '''DNS servers''' you are planning to use (in this example we used google DNS servers).</li> | <li>Write the '''DNS servers''' you are planning to use (in this example we used google DNS servers).</li> | ||
− | <li>Add '''Forwarding routes''' ( | + | <li>Add '''Forwarding routes''' (RUTX11 LAN network).</li> |
<li>'''Save''' settings.</li> | <li>'''Save''' settings.</li> | ||
</ol> | </ol> | ||
Line 240: | Line 178: | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | |||
<ol> | <ol> | ||
− | <li>Write the ''' | + | <li>Write the '''DNS servers''' you are planning to use (in this example we used google DNS servers).</li> |
− | + | <li>Add '''Forwarding routes''' (RUTX11 LAN network).</li> | |
− | <li> | ||
</ol> | </ol> | ||
</td> | </td> | ||
Line 270: | Line 206: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_10_v2.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | Home worker should now be able to access HQ network resources. | |
− | To verify the connection you can | + | To verify the connection you can ping some internal HQ server and if you get a reply, you have successfully connected to HQ‘s internal network. |
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− |
Revision as of 18:47, 22 May 2020
|
Configuration overview and prerequisites
Prerequisites:
- One RUTX router of any type
- A Public Static or Public Dynamic IP address
- At least one Android device
The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address (RUTX11) acts as the L2TP/IPsec server and the Android device acts as client. L2TP connects the networks of RUTX11 and Android client, IPsec provides the encryption for the L2TP tunnel. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds.
When the scheme is realized, you will be able to reach your home internal network with all internal systems, cameras, or other IOT devices, from anywhere in the world.
Configuring home router (RUTX)
L2TP
Login to the router's WebUI and navigate to the Services → VPN → L2TP page and do the following:
|
|
IPsec
Go to the Services → VPN → IPsec page and do the following:
|
In the IPsec Configuration page, do the following (and leave the rest as defaults, unless your specific configuration requires otherwise):
|
Android phone
Go to your Android device VPN settings and create new VPN configuration: |
Apply the following configuration:
|
Configure the following parameters:
|
|
If you applied the configuration correctly, after a moment it should indicate Connected: |
Results
Home worker should now be able to access HQ network resources. To verify the connection you can ping some internal HQ server and if you get a reply, you have successfully connected to HQ‘s internal network. |