Changes

'''Prerequisites''':

'''Prerequisites''':

* Two RUTxxx routers of any type (excluding [[RUT850]])

 

* A SIM card with a Public Static or Public Dynamic IP address for the L2TP Server

*Two RUTxxx routers of any type (excluding [[RUT850]])

* An end device (PC, Laptop, Tablet, Smartphone) to configure the routers

*A SIM card with a Public Static or Public Dynamic IP address for the L2TP Server

*An end device (PC, Laptop, Tablet, Smartphone) to configure the routers

----

----

As mentioned in the prerequisites section, the router that acts as the '''server''' must have a Public Static or Public Dynamic IP address (more information on the subject can be found '''[[Private and Public IP Addresses|here]]'''). If that is in order, we should start configuring the server.

As mentioned in the prerequisites section, the router that acts as the '''server''' must have a Public Static or Public Dynamic IP address (more information on the subject can be found '''[[Private and Public IP Addresses|here]]'''). If that is in order, we should start configuring the server.

----

----

* Login to the router's WebUI and go to '''Services → VPN → L2TP'''. Select '''Role: Server''', enter a name for the new instance and click the "Add" button:

 

*Login to the router's WebUI and go to '''Services → VPN → L2TP'''. Select '''Role: Server''', enter a name for the new instance and click the "Add" button:

[[File:Creating an l2tp server part 1 v1.png]]

[[File:Creating an l2tp server part 1 v1.png]]

----

----

* Click the "Edit" button located to the right of the newly created L2TP Server to enter the instance's settings window. The configuration is fairly simple, just remember to '''Enable''' the instance:

 

*Click the "Edit" button located to the right of the newly created L2TP Server to enter the instance's settings window. The configuration is fairly simple, just remember to '''Enable''' the instance:

[[File:Creating an l2tp server part 2 v1.png]]

[[File:Creating an l2tp server part 2 v1.png]]

----

----

* The rest of the parameters are user preferential so you should set them as you see fit. A short explanation on these parameters is provided below:

 

** '''Local IP''' defines the server's virtual IP address

*The rest of the parameters are user preferential so you should set them as you see fit. A short explanation on these parameters is provided below:

** '''Remote IP range''' parameters define the range of virtual IP addresses that will be assigned to connecting clients

**'''Local IP''' defines the server's virtual IP address

** '''User name''' and '''Password''' parameters define a client's authentication info

**'''Remote IP range''' parameters define the range of virtual IP addresses that will be assigned to connecting clients

**'''User name''' and '''Password''' parameters define a client's authentication info

Once you're done setting these parameters don't forget to click the '''Save''' button.

Once you're done setting these parameters don't forget to click the '''Save''' button.

'''Web proxies''' facilitate access to content on the World Wide Web and provide anonymity for the connecting clients. This is because the web proxy relays connected clients' requests through itself. Thus, the clients effectively "adopt" the server's Public IP address.

'''Web proxies''' facilitate access to content on the World Wide Web and provide anonymity for the connecting clients. This is because the web proxy relays connected clients' requests through itself. Thus, the clients effectively "adopt" the server's Public IP address.

----

----

* If you plan on using the L2TP Server as a web proxy, you will need to edit one preexisting '''Zone Forwarding''' rule in addition to the server configuration. In the router's WebUI, go to '''Network → Firewall → General Settings''', locate '''l2tp''' in the Zone Forwarding table and click the "Edit" button next to it:

 

*If you plan on using the L2TP Server as a web proxy, you will need to edit one preexisting '''Zone Forwarding''' rule in addition to the server configuration. In the router's WebUI, go to '''Network → Firewall → General Settings''', locate '''l2tp''' in the Zone Forwarding table and click the "Edit" button next to it:

[[File:How_set_up_l2tp_proxy_part_1_v1.png]]

[[File:How_set_up_l2tp_proxy_part_1_v1.png]]

----

----

* After this you will be redirected to the PPTP Zone Settings page where you will need to place a check mark next to the '''wan''' destination zone:

 

*After this you will be redirected to the L2TP Zone Settings page where you will need to place a check mark next to the '''wan''' destination zone:

[[File:How_set_up_l2tp_proxy_part_2_v2.png]]

[[File:How_set_up_l2tp_proxy_part_2_v2.png]]

===L2TP Client (RUT2)===

===L2TP Client (RUT2)===

----

----

* Now let's configure the L2TP '''Client'''. Login to the router's WebUI and go to '''Services → VPN → L2TP'''. Select '''Role: Client''', enter a name for the new instance and click the "Add" button:

 

*Now let's configure the L2TP '''Client'''. Login to the router's WebUI and go to '''Services → VPN → L2TP'''. Select '''Role: Client''', enter a name for the new instance and click the "Add" button:

[[File:Creating an l2tp client part 1 v1.png]]

[[File:Creating an l2tp client part 1 v1.png]]

----

----

* Click the "Edit" button located to the right of the newly created L2TP Client to enter the instance's settings window. In the settings window, '''Enable''' the L2TP instance, specify the server's '''Public (WAN) IP address''' and the '''client's authentication''' info as specified in the server's configuration:

 

*Click the "Edit" button located to the right of the newly created L2TP Client to enter the instance's settings window. In the settings window, '''Enable''' the L2TP instance, specify the server's '''Public (WAN) IP address''' and the '''client's authentication''' info as specified in the server's configuration:

[[File:Creating an l2tp client part 2 v1.png]]

[[File:Creating an l2tp client part 2 v1.png]]

Once this is done, don't forget to save the changes.

Once this is done, don't forget to save the changes.

----

----

* '''Optional''': if you plan on using the server as a web proxy, you should also enable the '''Default route''' option in the client's configuration:

 

*'''Optional''': if you plan on using the server as a web proxy, you should also enable the '''Default route''' option in the client's configuration:

[[File:How set up l2tp proxy part 3 v1.png]]

[[File:How set up l2tp proxy part 3 v1.png]]

==See also==

==See also==

* [[L2TP over IPsec]]

*[[L2TP over IPsec]]

* Other types of VPNs suported by RUTxxx devices:

*Other types of VPNs suported by RUTxxx devices:

** [[OpenVPN configuration examples]]

**[[OpenVPN configuration examples]]

** [[IPsec configuration examples]]

**[[IPsec configuration examples]]

** [[GRE Tunnel configuration examples]]

**[[GRE Tunnel configuration examples]]

** [[PPTP configuration examples]]

**[[PPTP configuration examples]]