Difference between revisions of "Template:Networking rutos configuration example l2tp over ipsec android"
Line 26: | Line 26: | ||
==Configuring home router (RUTX)== | ==Configuring home router (RUTX)== | ||
− | |||
===L2TP=== | ===L2TP=== | ||
− | + | ---- | |
<table class="nd-othertables_2"> | <table class="nd-othertables_2"> | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> [[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
+ | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_1_v1.png|770px|right]]</th> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white;> | <td style="border-bottom: 1px solid white;> | ||
− | Login to the router's WebUI | + | Login to the router's WebUI, navigate to the '''Services → VPN → L2TP''' page and do the following: |
<ol> | <ol> | ||
+ | <li>Enter a '''custom configuration name'''.</li> | ||
<li>Select '''Role: Server'''.</li> | <li>Select '''Role: Server'''.</li> | ||
− | <li> | + | <li>Click the '''Add''' button.</li> |
− | <li>Click the ''' | + | <li>Click the '''Edit''' button next to the newly created L2TP instance.</li> |
</ol> | </ol> | ||
</td> | </td> | ||
Line 52: | Line 53: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
+ | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_2_v1.png|770px|right]]</th> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 58: | Line 60: | ||
<ol> | <ol> | ||
<li>'''Enable''' the L2TP instance.</li> | <li>'''Enable''' the L2TP instance.</li> | ||
− | + | <li>Enter a '''Username''' and '''Password''' which later will be used for client authentication.</li> | |
− | <li>Enter a ''' | + | <li>Optionally, set a fixed IP for this client (if left empty, client will receive first free IP from the IP range).</li> |
− | <li>Optionally, set a fixed IP for this client (if left empty, | ||
<li>Don't forget to '''Save''' the changes.</li> | <li>Don't forget to '''Save''' the changes.</li> | ||
</ol> | </ol> | ||
Line 73: | Line 74: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
+ | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_3_v1.png|770px|right]]</th> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 79: | Line 81: | ||
Go to the '''Services → VPN → IPsec''' page and do the following: | Go to the '''Services → VPN → IPsec''' page and do the following: | ||
<ol> | <ol> | ||
− | <li>Enter a custom | + | <li>Enter a custom '''Name''' for the IPsec instance.</li> |
− | <li>Click the '''Add''' button. | + | <li>Click the '''Add''' button.</li> |
+ | <li>Click the '''Edit''' button next to the newly created instance.</li> | ||
</ol> | </ol> | ||
</td> | </td> | ||
Line 91: | Line 94: | ||
<tr> | <tr> | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
− | <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
− | + | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_4_v1.png|770px|right]]</th> | |
+ | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
Line 99: | Line 103: | ||
<li>'''Enable''' the instance.</li> | <li>'''Enable''' the instance.</li> | ||
<li>Enter your '''Pre-shared key'''.</li> | <li>Enter your '''Pre-shared key'''.</li> | ||
+ | <li>Select '''Type: Transport'''.</li> | ||
+ | <li>Set '''DH group''' to '''MODP1024'''.</li> | ||
+ | <li>Go to '''Phase 2''' settings and also set '''DH group''' to '''MODP1024'''.</li> | ||
+ | <li>'''Save''' changes.</li> | ||
</ol> | </ol> | ||
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
− | + | ||
− | + | ===Firewall=== | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
---- | ---- | ||
− | |||
− | |||
<table class="nd-othertables_2"> | <table class="nd-othertables_2"> | ||
<tr> | <tr> | ||
− | <th width= | + | <th width=355; style="border-bottom: 1px solid white;></th> |
− | <th width= | + | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> |
+ | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_11_v1.png|770px|right]]</th> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
− | <td style="border-bottom: | + | <td style="border-bottom: 1px solid white> |
− | + | Now go to the '''Network → Firewall → General Settings''' page and press '''Edit''' button next to the L2TP forward rule: | |
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
---- | ---- | ||
Line 163: | Line 134: | ||
<th width=355; style="border-bottom: 1px solid white;></th> | <th width=355; style="border-bottom: 1px solid white;></th> | ||
<th width=790; style="border-bottom: 1px solid white;" rowspan=2> | <th width=790; style="border-bottom: 1px solid white;" rowspan=2> | ||
− | [[File: | + | [[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_12_v1.png|770px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 169: | Line 140: | ||
<ol> | <ol> | ||
<li>Set '''Forward: accept'''.</li> | <li>Set '''Forward: accept'''.</li> | ||
+ | <li>Select '''Covered networks: LAN'''.</li> | ||
<li>'''Save''' changes.</li> | <li>'''Save''' changes.</li> | ||
</ol> | </ol> |
Revision as of 10:15, 2 July 2020
|
Configuration overview and prerequisites
Prerequisites:
- One RUTX router of any type
- A Public Static or Public Dynamic IP address
- At least one Android device
The topology above depicts the L2TP/IPsec scheme. The router with the Public IP address (RUTX) acts as the L2TP/IPsec server and the Android device acts as client. L2TP connects the networks of RUTX and Android client, IPsec provides the encryption for the L2TP tunnel. Created VPN tunnel will allow Android device to reach home network behind the RUTX router, but the rest of Android device network traffic will not be redirected through VPN. This way the VPN tunnel will not be under a huge load and will provide greater speeds.
When the scheme is realized, you will be able to log on to your home network from anywhere - work, hotel, car. You will have access to all of your home resources, and your data will still be secure, even if you will be using public WiFi.
Configuring home router (RUTX)
L2TP
Login to the router's WebUI, navigate to the Services → VPN → L2TP page and do the following:
|
|
IPsec
Go to the Services → VPN → IPsec page and do the following:
|
In the IPsec Configuration page, do the following (and leave the rest as defaults, unless your specific configuration requires otherwise):
|
Firewall
Now go to the Network → Firewall → General Settings page and press Edit button next to the L2TP forward rule: |
|
Android phone
Go to your Android device VPN settings and create a new VPN network: |
Apply the following configuration:
|
|
Now open your newly created VPN instance and connect to it:
|
If you applied the configuration correctly, after a moment it should indicate Connected: |
Results
Now you should be able to access your home network resources. To verify the connection you can try accessing your router's WebUI without being connected to it in any way. If you are able to do that, you have successfully connected to your home network. |
Disclaimer:
This configuration example was created by using Android version 10. The IPsec Phase 1 and Phase 2 settings, which were used in this configuration example, might not work with other Android versions and might require adjustment.