Template:Networking rutos configuration example l2tp over ipsec android: Difference between revisions

From Teltonika Networks Wiki
VisualWikitext
Line 122: Line 122:
     <tr>
     <tr>
         <td style="border-bottom: 1px solid white>
         <td style="border-bottom: 1px solid white>
Type '''VPN settings''' in the Windows search bar:
Go to your Android device '''VPN settings''' and create new VPN configuration:
         </td>
         </td>
     </tr>
     </tr>
Line 137: Line 137:
     <tr>
     <tr>
         <td style="border-bottom: 1px solid white>
         <td style="border-bottom: 1px solid white>
Click the '''Add a VPN connection''' button:
Apply the following configuration:
        <ol>
            <li>Select '''Type: L2TP/IPsec PSK'''.</li>
            <li>Enter the router's WAN IP address into the '''Server''' field.</li>
            <li>Enter the '''Pre-shared key''' exactly as it was specified in the router's IPsec settings.</li>
            <li>Press '''Show advanced options'''</li>
        </ol>
         </td>
         </td>
     </tr>
     </tr>
Line 154: Line 160:
Configure the following parameters:
Configure the following parameters:
         <ol>
         <ol>
             <li>Select '''VPN provider: Windows (built-in)'''.</li>
             <li>Write the '''DNS servers''' you are planning to use (in this example we used google DNS servers).</li>
            <li>Enter a custom '''Connection name'''.</li>
             <li>Add '''Forwarding routes''' (RUTX11 LAN network).</li>
            <li>Enter the router's WAN IP address into the '''Server name or address''' field.</li>
             <li>'''Save''' settings.</li>
            <li>Select '''VPN type: L2TP/IPsec with pre-shared key'''.</li>
            <li>Enter the '''Pre-shared key''' exactly as it was specified on the router.</li>
            <li>Select '''Type of sign-in info: User name and password'''.</li>
             <li>Enter the '''User name''' and '''Password''' exactly as they were specified on the router.</li>
             <li>Click '''Save'''</li>
         </ol>
         </ol>
         </td>
         </td>
Line 177: Line 178:
     <tr>
     <tr>
         <td style="border-bottom: 1px solid white>
         <td style="border-bottom: 1px solid white>
Type '''Network Connections''' in the Windows search bar:
        <ol>
            <li>Write the '''DNS servers''' you are planning to use (in this example we used google DNS servers).</li>
            <li>Add '''Forwarding routes''' (RUTX11 LAN network).</li>
        </ol>
         </td>
         </td>
     </tr>
     </tr>
Line 192: Line 196:
     <tr>
     <tr>
         <td style="border-bottom: 1px solid white>
         <td style="border-bottom: 1px solid white>
Press right mouse click on your newly created VPN instance and select '''Properties''':
If you applied the configuration correctly, after a moment it should indicate '''Connected''':
         </td>
         </td>
     </tr>
     </tr>

Revision as of 17:35, 22 May 2020

Configuration overview and prerequisites

Prerequisites:

  • One RUTX router of any type
  • A Public Static or Public Dynamic IP address
  • At least one Android device

The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address (RUTX11) acts as the L2TP/IPsec server and the Android device acts as client. L2TP connects the networks of RUTX11 and Android client, IPsec provides the encryption for the L2TP tunnel. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds.

When the scheme is realized, you will be able to reach your home internal network with all internal systems, cameras, or other IOT devices, from anywhere in the world.

Configuring home router (RUTX)

L2TP

Login to the router's WebUI and navigate to the Services → VPN → L2TP page and do the following:

  1. Enter a custom configuration name.
  2. Select Role: Server.
  3. Click the Add button.
  4. Click the Edit button next to the newly created L2TP instance.
  1. Enable the L2TP instance.
  2. Enter a User name and Password for authentication for the client.
  3. Optionaly, set a fixed IP for this client (if left empty, client will receive first free IP from the IP range).
  4. Don't forget to Save the changes.

IPsec

Go to the Services → VPN → IPsec page and do the following:

  1. Enter a custom name for the IPsec instance.
  2. Click the Add button.
  3. Click the Edit button next to the newly created instance.

In the IPsec Configuration page, do the following (and leave the rest as defaults, unless your specific configuration requires otherwise):

  1. Enable the instance.
  2. Enter your Pre-shared key.
  3. Select Type: Transport.
  4. Set DH group to MODP1024.
  5. Go to Phase 2 settings and also set DH group to MODP1024.
  6. Save changes.

Android phone

Go to your Android device VPN settings and create new VPN configuration:

Apply the following configuration:

  1. Select Type: L2TP/IPsec PSK.
  2. Enter the router's WAN IP address into the Server field.
  3. Enter the Pre-shared key exactly as it was specified in the router's IPsec settings.
  4. Press Show advanced options

Configure the following parameters:

  1. Write the DNS servers you are planning to use (in this example we used google DNS servers).
  2. Add Forwarding routes (RUTX11 LAN network).
  3. Save settings.
  1. Write the DNS servers you are planning to use (in this example we used google DNS servers).
  2. Add Forwarding routes (RUTX11 LAN network).

If you applied the configuration correctly, after a moment it should indicate Connected:

Results

Home worker should now be able to access HQ network resources. To verify the connection you can ping some internal HQ server and if you get a reply, you have successfully connected to HQ‘s internal network.

Retrieved from "https://wiki.teltonika-networks.com/index.php?title=Template:Networking_rutos_configuration_example_l2tp_over_ipsec_android&oldid=63405"