L2TP over IPsec RutOS: Difference between revisions

L2TP over IPsec RutOS (view source)

Revision as of 12:29, 24 August 2023

4 bytes added , 24 August 2023

→‎Server (RUT1)

VisualWikitext

CaturN

Administrators

13

edits

@@ Line 36: / Line 36: @@
 [[File:Networking rutxxx configuration examples ipsec server configuration v2.png|border|class=tlt-border]]
-* '''Enable''' - if checked, enables the IPsec instance
+# '''Enable''' - if checked, enables the IPsec instance
-* '''Remote endpoint''' - IP address or hostname of the remote IPsec instance. '''Leave empty''' for the server configuration
+# '''Remote endpoint''' - IP address or hostname of the remote IPsec instance. '''Leave empty''' for the server configuration
-* '''Pre shared key''' - a shared password used for authentication between the peers. The value of this field must match the other instance
+# '''Pre shared key''' - a shared password used for authentication between the peers. The value of this field must match the other instance
-* '''Local identifier''' - 192.168.0.1
+# '''Local identifier''' - 192.168.0.1
-* '''Remote identifier''' - 192.168.0.20
+# '''Remote identifier''' - 192.168.0.20
-* '''Type''' - the type of the connection. '''Transport''' encrypts only the payload and Encapsulating Security Payload (ESP) trailer; so the IP header of the original packet is not encrypted. Transport mode is usually used when another tunneling protocol (such as [[VPN#GRE_Tunnel|GRE]], [[VPN#L2TP|L2TP]]) is used to first encapsulate the IP data packet, then IPsec is used to protect the GRE/L2TP tunnel packets. NAT traversal is not supported with the transport mode
+# '''Type''' - the type of the connection.
-* '''IKE liftime''' - 8h, make sure you've inserted the same liftime in '''Phase 1''' and '''Phase 2'''
+#'''Transport''' encrypts only the payload and Encapsulating Security Payload (ESP) trailer; so the IP header of the original packet is not encrypted. Transport mode is usually used when another tunneling protocol (such as [[VPN#GRE_Tunnel|GRE]], [[VPN#L2TP|L2TP]]) is used to first encapsulate the IP data packet, then IPsec is used to protect the GRE/L2TP tunnel packets. NAT traversal is not supported with the transport mode
+# '''IKE lifetime''' - 8h, make sure you've inserted the same lifetime in '''Phase 1''' and '''Phase 2'''
 ====Client (RUT2)====