Changes

← Older edit

Template:Networking rutx configuration example l2tp over ipsec work use case default gateway (view source)

Revision as of 08:12, 26 October 2022

1,571 bytes added , 08:12, 26 October 2022

no edit summary

Line 17: Line 17:

'''Prerequisites''':

−

* One ~~RUTxxx~~ router (In this article RUTX11 will be used)

+

* One Teltonika Networks router (In this article RUTX11 will be used)

* A Public Static or Public Dynamic IP addresses

* At least one end device with Windows 10

<br>

−

The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address ('''''RUTX11''''') acts as the '''L2TP/IPsec server''' and the '''Windows 10 device''' acts as '''client'''. L2TP connects the networks of '''RUTX11''' and '''Windows 10 client''', IPsec provides the encryption for the L2TP tunnel.

+

The topology above depicts the L2TP/IPsec scheme. - The router with the Public IP address ('''''RUTX11''''') acts as the '''L2TP/IPsec server''' and the '''Windows 10 device''' acts as '''client'''. L2TP connects the networks of '''RUTX11''' and '''Windows 10 client''', IPsec provides the encryption for the L2TP tunnel. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds.

−

When the scheme is realized, home workers will be able to reach corporation’s internal network with all internal systems, allowing working from home to be possible~~. All of the home workers LAN and WAN traffic is going to go through that tunnel~~.

+

When the scheme is realized, home workers will be able to reach corporation’s internal network with all internal systems, allowing working from home to be possible.

==Configuring HQ corporation router==

Line 106: Line 106:

</table>

−

===~~Firewall~~===

+

==Home worker’s computer==

+

+

<tr>

+

+

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_6_v2.png|border|class=tlt-border|550px|right]]</th>

+

</tr>

+

<tr>

+

+

Type '''VPN settings''' in the Windows search bar:

+

</td>

+

</tr>

+

</table>

+

----

<tr>

−

+

−

<th width=~~790~~; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutx_configuration_examples_l2tp_over_ipsec_windows_10_5_v1~~.png|~~770px~~|right]]</th>

+

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_7_v2.png|border|class=tlt-border|550px|right]]</th>

</tr>

<tr>

−

~~Go to~~ the '''~~Network → Firewall → General Settings~~''' ~~and press edit next to the L2TP zone forwarding rule~~:

+

Click the '''Add a VPN connection''' button:

</td>

</tr>

Line 125: Line 138:

<tr>

−

+

−

<th width=~~790~~; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutx_configuration_examples_l2tp_over_ipsec_windows_10_6_v1~~.png|~~770px~~|right]]</th>

+

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_8_v2.png|border|class=tlt-border|550px|right]]</th>

+

</tr>

+

<tr>

+

+

Configure the following parameters:

+

<ol>

+

<li>Select '''VPN provider: Windows (built-in)'''.</li>

+

<li>Enter a custom '''Connection name'''.</li>

+

<li>Enter the router's WAN IP address into the '''Server name or address''' field.</li>

+

<li>Select '''VPN type: L2TP/IPsec with pre-shared key'''.</li>

+

<li>Enter the '''Pre-shared key''' exactly as it was specified on the router.</li>

+

<li>Select '''Type of sign-in info: User name and password'''.</li>

+

<li>Enter the '''User name''' and '''Password''' exactly as they were specified on the router.</li>

+

<li>Click '''Save'''</li>

+

</ol>

+

</td>

+

</tr>

+

</table>

+

----

+

+

<tr>

+

+

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_11_v2.png|border|class=tlt-border|550px|right]]</th>

</tr>

<tr>

−

~~Allow L2TP forward to/from~~ '''~~WAN~~''' ~~and click~~ the ~~'''Save & Apply''' button~~:

+

Type '''Network Connections''' in the Windows search bar:

+

</td>

+

</tr>

+

</table>

+

----

+

+

<tr>

+

+

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_12_v2.png|border|class=tlt-border|550px|right]]</th>

+

</tr>

+

<tr>

+

+

Press right mouse click on your newly created VPN instance and select '''Properties''':

</td>

</tr>

</table>

−

~~==Home worker’s computer==~~

+

----

<tr>

−

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_6_v2~~.png|border|class=tlt-border|550px|right]]</th>

+

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_13_v2.png|border|class=tlt-border|550px|right]]</th>

</tr>

<tr>

−

~~Type~~ '''~~VPN settings~~''' ~~in the Windows search bar~~:

+

Navigate to '''Networking''' section and double click '''Internet Protocol Version 4 (TCP/IPv4)''':

</td>

</tr>

Line 155: Line 205:

<tr>

−

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_7_v2~~.png|border|class=tlt-border|550px|right]]</th>

+

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_14_v2.png|border|class=tlt-border|550px|right]]</th>

</tr>

<tr>

−

~~Click the~~ '''~~Add a VPN connection~~''' ~~button~~:

+

Go to '''Advanced''' settings:

</td>

</tr>

Line 169: Line 219:

<tr>

−

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_8_v2~~.png|border|class=tlt-border|550px|right]]</th>

+

<th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutxxx_configuration_examples_l2tp_over_ipsec_windows_10_15_v2.png|border|class=tlt-border|550px|right]]</th>

</tr>

<tr>

−

~~Configure the following parameters:~~

+

Now disable '''Use default gateway on remote network''' and save settings:

−

~~<ol>~~

−

~~<li>Select '''VPN provider: Windows (built-in)'''.</li>~~

−

~~<li>Enter a custom '''Connection name'''.</li>~~

−

~~<li>Enter the router's WAN IP address into the '''Server name or address''' field.</li>~~

−

~~<li>Select '''VPN type: L2TP/IPsec with pre-shared key'''.</li>~~

−

~~<li>Enter the '''Pre-shared key~~''' ~~exactly as it was specified~~ on ~~the router.</li>~~

−

~~<li>Select~~ '''~~Type of sign-in info~~: ~~User name and password'''.</li>~~

−

~~<li>Enter the '''User name''' and '''Password''' exactly as they were specified on the router.</li>~~

−

~~<li>Click '''Save'''</li>~~

−

~~</ol>~~

</td>

</tr>

Line 197: Line 237:

<tr>

−

~~After you are redirected~~ back to the VPN settings page, locate your new connection and click the Connect button. If the connection was successful, you should see the word "~~connected~~" appear under the connection name:

+

Go back to the VPN settings page, locate your new connection and click the '''Connect''' button. If the connection was successful, you should see the word '''"Connected"''' appear under the connection name:

</td>

</tr>

Domnev

Administrators

1,108

edits