Connecting to the office network remotely from your home via VPN (L2TP over IPsec)

Configuration overview and prerequisites

Prerequisites:

• One Teltonika Networks router (In this article RUTX11 will be used)
• A Public Static or Public Dynamic IP addresses
• At least one end device with Windows 10

The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address (RUTX11) acts as the L2TP/IPsec server and the Windows 10 device acts as client. L2TP connects the networks of RUTX11 and Windows 10 client, IPsec provides the encryption for the L2TP tunnel. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds.

When the scheme is realized, home workers will be able to reach corporation’s internal network with all internal systems, allowing working from home to be possible.

Configuring HQ corporation router

L2TP

Login to the router's WebUI and navigate to the Services → VPN → L2TP page and do the following: Select Role: Server. Enter a custom configuration name. Click the Add button. You will be prompted to the configuration window

---

Enable the L2TP instance. Click on the Add button to add a new user Enter a User name and Password for authentication for the client. Optionally, set a fixed IP for this client (if left empty, the client will receive the first free IP from the IP range). Don't forget to Save the changes.

IPsec

---

Go to the Services → VPN → IPsec page and do the following: Enter a custom name for the IPsec instance. Click the Add button. You will be prompted to the configuration window

---

In the IPsec Configuration page, do the following (and leave the rest as defaults, unless your specific configuration requires otherwise): Enable the instance. Enter your Pre-shared key.

3. Select Type: Transport. Do not forget to Save changes.

Home worker’s computer

Type VPN settings in the Windows search bar:

---

Click the Add a VPN connection button:

---

Configure the following parameters: Select VPN provider: Windows (built-in). Enter a custom Connection name. Enter the router's WAN IP address into the Server name or address field. Select VPN type: L2TP/IPsec with pre-shared key. Enter the Pre-shared key exactly as it was specified on the router. Select Type of sign-in info: User name and password. Enter the User name and Password exactly as they were specified on the router. Click Save

---

Type Network Connections in the Windows search bar:

---

Press right mouse click on your newly created VPN instance and select Properties:

---

Navigate to Networking section and double click Internet Protocol Version 4 (TCP/IPv4):

---

Go to Advanced settings:

---

Now disable Use default gateway on remote network and save settings:

---

Go back to the VPN settings page, locate your new connection and click the Connect button. If the connection was successful, you should see the word "Connected" appear under the connection name:

Results

Home worker should now be able to access HQ network resources. To verify the connection you can ping some internal HQ server and if you get a reply, you have successfully connected to HQ‘s internal network.