Changes

1,012 bytes added ,  10:22, 8 June 2018
no edit summary
Line 39: Line 39:  
====Client (RUT2)====
 
====Client (RUT2)====
 
----
 
----
*  
+
* Create another instance on the second router the same way you created the server (login, add new instance, click "Edit"). Adhere to the configurations presented in the figure below:
    
[[File:L2tp over ipsec ipsec client.png]]
 
[[File:L2tp over ipsec ipsec client.png]]
 +
 +
* '''Enable''' - if checked, enables the IPsec instance
 +
* '''Type''' - the type of the connection. '''Transport''' encrypts only the payload and Encapsulating Security Payload (ESP) trailer; so the IP header of the original packet is not encrypted. Transport mode is usually used when another tunneling protocol (such as [[VPN#GRE_Tunnel|GRE]], [[VPN#L2TP|L2TP]]) is used to first encapsulate the IP data packet, then IPsec is used to protect the GRE/L2TP tunnel packets. NAT traversal is not supported with the transport mode
 +
* '''Pre shared key''' - a shared password used for authentication between the peers. The value of this field must match the other instance
 +
* '''Remote VPN endpoint''' - IP address or hostname of the remote IPsec instance. Enter the '''IPsec server's Public IP address''' in the client's configuration
    
====Testing the connection====
 
====Testing the connection====

Navigation menu