* Create another instance on the second router the same way you created the server (login, add new instance, click "Edit"). Adhere to the configurations presented in the figure below:
[[File:L2tp over ipsec ipsec client.png]]
[[File:L2tp over ipsec ipsec client.png]]
+
+
* '''Enable''' - if checked, enables the IPsec instance
+
* '''Type''' - the type of the connection. '''Transport''' encrypts only the payload and Encapsulating Security Payload (ESP) trailer; so the IP header of the original packet is not encrypted. Transport mode is usually used when another tunneling protocol (such as [[VPN#GRE_Tunnel|GRE]], [[VPN#L2TP|L2TP]]) is used to first encapsulate the IP data packet, then IPsec is used to protect the GRE/L2TP tunnel packets. NAT traversal is not supported with the transport mode
+
* '''Pre shared key''' - a shared password used for authentication between the peers. The value of this field must match the other instance
+
* '''Remote VPN endpoint''' - IP address or hostname of the remote IPsec instance. Enter the '''IPsec server's Public IP address''' in the client's configuration