DHCP RELAY over L2TPv3: Difference between revisions

From Teltonika Networks Wiki
VisualWikitext
(under construction)
No edit summary
 
(12 intermediate revisions by 2 users not shown)
Line 12: Line 12:


== Configuration Scheme ==
== Configuration Scheme ==
I will paste a Topology Image here
[[File:Topology LT2Pv3.png|border|class=tlt-border|750x750px]]


== DHCP Server Settings ==
== DHCP Server Settings ==


=== DHCP Pool ===
=== DHCP Pool ===
Enter the router's WebUI, go to '''Network > Interfaces > Ethernet LAN''' and click the '''<nowiki/>'Edit'''' button on the right side of the interface to set the LAN network address.
Login to the router's WebUI and navigate to '''Network → Interfaces → Ethernet LAN.''' Click the '''<nowiki/>'Edit'''' button on the right side of the interface to set the LAN network address.
[[File:Server a.png|center|thumb|464x464px|LAN network for DHCP server]]Under '''DHCP SERVER''' set parameters for the DHCP pool.
[[File:Server new 02.png|alt=DHCP poll parameters|center|thumb|464x464px|DHCP pool parameters|border]]


=== Set up Mobile WAN as Main WAN ===
[[File:Server new 01 fixed.png|border|class=tlt-border|750x750px]]
Enter to the router’s WebUI, go to '''Network > Interfaces''' press mouse click on the Mobile Wan interface, then drag it to the 1<sup>st</sup> position and then press '''Save & Apply'''.
[[File:Server new 03.png|alt=Mobile WAN as Main WAN|center|thumb|504x504px|Mobile WAN as Main WAN]]


=== Create L2TPv3 instance ===
Under '''DHCP SERVER''' set parameters for the DHCP pool.
Go to router’s WebUI, under '''Service > VPN > L2TP > L2TPv3''' and create new '''L2TPV3''' instance.
 
[[File:Server new 02 1 fixed.png|border|class=tlt-border|750x750px]]
 
 
 
===Set up Mobile WAN as Main WAN===
Enter to the router’s WebUI, go to '''Network → Interfaces''' press mouse click on the Mobile Wan interface, then drag it to the 1<sup>st</sup> position and then press '''Save & Apply'''.
[[File:Server new 03 fix.png|border|class=tlt-border|750x750px]]
===Create L2TPv3 instance===
Go to router’s WebUI, under '''Service → VPN → L2TP → L2TPv3''' and create new '''L2TPV3''' instance.


'''LOCAL SETTING'''
'''LOCAL SETTING'''


Local address: 84.15.155.201
Local address: 84.15.XXX.XXX


Tunnel ID: 100
Tunnel ID: 100
Line 40: Line 45:
'''PEER SETTING'''
'''PEER SETTING'''


Peer address: 84.15.249.182
Peer address: 84.15.XXX.XXX


Peer Tunnel ID: 10
Peer Tunnel ID: 10
Line 58: Line 63:
Layer 2 specific header type: Linux Default
Layer 2 specific header type: Linux Default


[[File:Server new 04 01.png|alt=L2TPv3 Server settings|center|thumb|488x488px|L2TPv3 Server settings]]
[[File:Server new 04 01 fix.png|border|class=tlt-border|750x750px]]
[[File:Server new 04 02.png|alt=L2TPv3 Server Settings|center|thumb|480x480px|L2TPv3 Server Settings]]Specify the Local address of your mobile WAN. Local value for Tunnel ID, session ID and Cookie must match with the peer values being used at the other end.
 
[[File:Server new 04 02.png|border|class=tlt-border|750x750px]]
 
'''Note:''' Specify on "Local address" your mobile WAN public IP. Local value for Tunnel ID, session ID and Cookie must match with the peer values being used at the other end.
 
==DHCP Client Settings (Relay) ==
 
===DHCP Relay===
Enter the router's WebUI, go to '''Network → Interface → LAN → DHCP Server''' and change the "'''Enable DHCP'''" field value from Enable to Relay and type in the DHCP Server the IP address of the server. Click '''Save & Apply'''.


== DHCP Client Settings (Relay) ==
[[File:Client 01 fix.png|border|class=tlt-border|750x750px]]


=== DHCP Relay ===
Enter the router's WebUI, go to '''Network > Interface > LAN > DHCP Server''' and change the "'''Enable DHCP'''" field value from Enable to Relay and type in the DHCP Server the IP address of the server. Click Save & Apply.
[[File:Client 01.png|alt=Enable DHCP Relay|center|thumb|517x517px|Enable DHCP Relay]]
'''Note:''' The IPv4 address of the LAN interface is different from the server's LAN interface address, this is necessary to avoid conflicts.
'''Note:''' The IPv4 address of the LAN interface is different from the server's LAN interface address, this is necessary to avoid conflicts.


=== Set up Mobile WAN as Main WAN ===
===Set up Mobile WAN as Main WAN===
Enter to the router’s WebUI, go to '''Network > Interfaces''' press mouse click on the Mobile Wan interface, then drag it to the 1<sup>st</sup> position and then press '''Save & Apply'''.
Enter to the router’s WebUI, go to '''Network → Interfaces''' press mouse click on the Mobile Wan interface, then drag it to the 1<sup>st</sup> position and then press '''Save & Apply'''.
[[File:Client 02.png|alt=Mobile WAN as Main WAN|center|thumb|545x545px|Mobile WAN as Main WAN]]
 
[[File:Client 02 fix.png|border|class=tlt-border|750x750px]]
 
===Modify Enable-DHCP-renew firewall rule===
Enter in the router’s WebUI, go to '''Network → Firewall → Traffic rules''' to additionally allow destination port 67.


=== Modify Enable-DHCP-renew firewall rule ===
[[File:Client 03.png|border|class=tlt-border|750x750px]]
Enter in the router’s WebUI, go to '''Network > Firewall > Traffic rules''' to additionally allow destination port 67.
[[File:Client 03.png|alt=DHCP renew firewall rule|center|thumb|555x555px|DHCP renew firewall rule]]


=== Create L2TPv3 instance ===
===Create L2TPv3 instance===
Go to router’s WebUI, under '''Service > VPN > L2TP > L2TPv3''' and create new '''L2TPV3''' instance.
Go to router’s WebUI, under '''Service → VPN → L2TP → L2TPv3''' and create new '''L2TPV3''' instance.


'''LOCAL SETTING'''
'''LOCAL SETTING'''


Local address: 84.15.249.182
Local address: 84.15.XXX.XXX


Tunnel ID: 10
Tunnel ID: 10
Line 91: Line 103:
'''PEER SETTING'''
'''PEER SETTING'''


Peer address: 84.15.155.201
Peer address: 84.15.XXX.XXX


Peer Tunnel ID: 100
Peer Tunnel ID: 100
Line 108: Line 120:


Layer 2 specific header type: Linux Default
Layer 2 specific header type: Linux Default
[[File:Client 04.png|alt=L2TPv3 Client instance|center|thumb|517x517px|L2TPv3 Client Settings]]
[[File:Server new 04 02.png|alt=L2TPv3 Client Settings|center|thumb|523x523px|L2TPv3 Client Settings]]


[[File:Client 04 fix.png|border|class=tlt-border|750x750px]]
[[File:Server new 04 02.png|border|class=tlt-border|750x750px]]
'''Note:''' Specify on "Local address" your mobile WAN public IP. Local value for Tunnel ID, session ID and Cookie must match with the peer values being used at the other end.
==Testing DHCP over L2TPv3==
To test the realy settings go to DHCP server to check that devices are able to recieve IP addresses in the range 192.168.10.150 - 192.168.10.170 either via LAN port or Wi-Fi. Access the CLI  and run '''cat /tmp/dhcp.leases''' to list all DHCP clients.
[[File:Test 01 fix.png|border|class=tlt-border|750x750px]]
Asking for the Address Resolution Protocol (ARP) table is also an other method to find hosts on the LAN network.


== Testing DHCP over L2TPv3 ==
[[File:Test 02 fix.png|border|class=tlt-border|750x750px]]
[[Category:Use cases]]

Latest revision as of 14:09, 2 August 2023

Main Page > General Information > Configuration Examples > Use cases > DHCP RELAY over L2TPv3

Introduction

A DHCP relay agent allows the DHCP clients to obtain IP addresses from a DHCP server that is not configured on the same LAN.

This article provides a configuration example with details on how to set-up a DHCP relay over a L2TPv3 VPN.

Prerequisites

You will need:

  • Two RUT or RUTX devices (one as Server and other as Client)
  • A PC acting as a Host for testing
  • Both routers must have a Public Static or Public Dynamic IP addresses

Configuration Scheme

DHCP Server Settings

DHCP Pool

Login to the router's WebUI and navigate to Network → Interfaces → Ethernet LAN. Click the 'Edit' button on the right side of the interface to set the LAN network address.

Under DHCP SERVER set parameters for the DHCP pool.


Set up Mobile WAN as Main WAN

Enter to the router’s WebUI, go to Network → Interfaces press mouse click on the Mobile Wan interface, then drag it to the 1st position and then press Save & Apply.

Create L2TPv3 instance

Go to router’s WebUI, under Service → VPN → L2TP → L2TPv3 and create new L2TPV3 instance.

LOCAL SETTING

Local address: 84.15.XXX.XXX

Tunnel ID: 100

Session ID: 100

Cookie: 12ABCDEF

PEER SETTING

Peer address: 84.15.XXX.XXX

Peer Tunnel ID: 10

Peer Session ID: 10

Peer Cookie: 12ABCDEF

INSTANCE SETTING

Bridge to: LAN

MTU: 1500

Encapsulation: IP

Layer 2 specific header type: Linux Default

Note: Specify on "Local address" your mobile WAN public IP. Local value for Tunnel ID, session ID and Cookie must match with the peer values being used at the other end.

DHCP Client Settings (Relay)

DHCP Relay

Enter the router's WebUI, go to Network → Interface → LAN → DHCP Server and change the "Enable DHCP" field value from Enable to Relay and type in the DHCP Server the IP address of the server. Click Save & Apply.

Note: The IPv4 address of the LAN interface is different from the server's LAN interface address, this is necessary to avoid conflicts.

Set up Mobile WAN as Main WAN

Enter to the router’s WebUI, go to Network → Interfaces press mouse click on the Mobile Wan interface, then drag it to the 1st position and then press Save & Apply.

Modify Enable-DHCP-renew firewall rule

Enter in the router’s WebUI, go to Network → Firewall → Traffic rules to additionally allow destination port 67.

Create L2TPv3 instance

Go to router’s WebUI, under Service → VPN → L2TP → L2TPv3 and create new L2TPV3 instance.

LOCAL SETTING

Local address: 84.15.XXX.XXX

Tunnel ID: 10

Session ID: 10

Cookie: 12ABCDEF

PEER SETTING

Peer address: 84.15.XXX.XXX

Peer Tunnel ID: 100

Peer Session ID: 100

Peer Cookie: 12ABCDEF

INSTANCE SETTING

Bridge to: LAN

MTU: 1500

Encapsulation: IP

Layer 2 specific header type: Linux Default

Note: Specify on "Local address" your mobile WAN public IP. Local value for Tunnel ID, session ID and Cookie must match with the peer values being used at the other end.


Testing DHCP over L2TPv3

To test the realy settings go to DHCP server to check that devices are able to recieve IP addresses in the range 192.168.10.150 - 192.168.10.170 either via LAN port or Wi-Fi. Access the CLI and run cat /tmp/dhcp.leases to list all DHCP clients.

Asking for the Address Resolution Protocol (ARP) table is also an other method to find hosts on the LAN network.

Retrieved from "https://wiki.teltonika-networks.com/index.php?title=DHCP_RELAY_over_L2TPv3&oldid=109696"