Changes

Template:Networking rutos configuration example l2tp over ipsec android (view source)

Revision as of 12:51, 22 August 2024

1,288 bytes added ,  12:51
no edit summary
Line 26: Line 26:     
==Configuring home router (RUTX)==
 
==Configuring home router (RUTX)==
 +
As mentioned in the prerequisites section, the router that acts as the server must have a Public Static or Public Dynamic IP address (more information on the subject can be found here). If that is in order, we should start configuring the server.
 
===L2TP===
 
===L2TP===
−
----
+
 
    
<table class="nd-othertables_2">
 
<table class="nd-othertables_2">
 
     <tr>
 
     <tr>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
−
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>  
+
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2> [[File:RutOS_L2TP_IPsec_VPN_7,8_add_L2TP_Server.png|770px|right]]</th>
−
[[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_1_v1.png|770px|right]]</th>
   
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td style="border-bottom: 1px solid white;>
 
         <td style="border-bottom: 1px solid white;>
−
Login to the router's WebUI, navigate to the '''Services → VPN → L2TP''' page and do the following:
+
Login to the router's WebUI and navigate to the '''Services → VPN → L2TP''' page and do the following:
 
<ol>
 
<ol>
 +
    <li>Select '''Role: Server'''.</li>
 
     <li>Enter a '''custom configuration name'''.</li>
 
     <li>Enter a '''custom configuration name'''.</li>
−
    <li>Select '''Role: Server'''.</li>
+
     <li>Click the '''Add''' button. You will be prompted to the configuration window</li>
−
     <li>Click the '''Add''' button.</li>
  −
    <li>Click the '''Edit''' button next to the newly created L2TP instance.</li>
   
</ol>
 
</ol>
 
         </td>
 
         </td>
Line 53: Line 52:  
     <tr>
 
     <tr>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
−
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>
+
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:RutOS_L2TP_IPsec_VPN_7,8_add_L2TP_Server_config.png|770px|right]]</th>
−
[[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_2_v1.png|770px|right]]</th>
   
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 60: Line 58:  
<ol>
 
<ol>
 
     <li>'''Enable''' the L2TP instance.</li>
 
     <li>'''Enable''' the L2TP instance.</li>
−
     <li>Enter a '''Username''' and '''Password''' which later will be used for client authentication.</li>
+
    <li>Click on the '''Add''' button to add a new user</li>
−
     <li>Optionally, set a fixed IP for this client (if left empty, client will receive first free IP from the IP range).</li>
+
     <li>Enter a '''User name''' and '''Password''' for authentication for the client.</li>
 +
     <li>Optionally, set a fixed IP for this client (if left empty, the client will receive the first free IP from the IP range).</li>
 
     <li>Don't forget to '''Save''' the changes.</li>
 
     <li>Don't forget to '''Save''' the changes.</li>
 
</ol>
 
</ol>
Line 74: Line 73:  
     <tr>
 
     <tr>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
−
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>
+
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:RutOS_L2TP_IPsec_VPN_7,8_add_Ipsec_Server.png|770px|right]]</th>
−
[[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_3_v1.png|770px|right]]</th>
   
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 81: Line 79:  
Go to the '''Services → VPN → IPsec''' page and do the following:
 
Go to the '''Services → VPN → IPsec''' page and do the following:
 
<ol>     
 
<ol>     
−
       <li>Enter a custom '''Name''' for the IPsec instance.</li>
+
       <li>Enter a custom name for the IPsec instance.</li>
−
       <li>Click the '''Add''' button.</li>
+
       <li>Click the '''Add''' button. You will be prompted to the configuration window</li>
−
      <li>Click the '''Edit''' button next to the newly created instance.</li>
   
</ol>
 
</ol>
 
         </td>
 
         </td>
Line 94: Line 91:  
     <tr>
 
     <tr>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
−
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>
+
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:RutOS_L2TP_IPsec_VPN_7,8_add_Ipsec_Server_config_instnace222.png|770px|right]]</th>
−
[[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_4_v1.png|770px|right]]</th>
+
  </tr>
−
    </tr>
   
     <tr>
 
     <tr>
 
         <td style="border-bottom: 1px solid white>
 
         <td style="border-bottom: 1px solid white>
Line 103: Line 99:  
       <li>'''Enable''' the instance.</li>
 
       <li>'''Enable''' the instance.</li>
 
       <li>Enter your '''Pre-shared key'''.</li>
 
       <li>Enter your '''Pre-shared key'''.</li>
−
      <li>Select '''Type: Transport'''.</li>
  −
      <li>Set '''DH group''' to '''MODP1024'''.</li>
  −
      <li>Go to '''Phase 2''' settings and also set '''DH group''' to '''MODP1024'''.</li>
  −
      <li>'''Save''' changes.</li>
   
</ol>
 
</ol>
 +
        </td>
 +
    </tr>
 +
</table>
 +
<table class="nd-othertables_2">
 +
    <tr>
 +
        <th width=355; style="border-bottom: 1px solid white;></th>
 +
        <th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:RutOS_L2TP_IPsec_VPN_7,8_add_Ipsec_Server_config_instance_connection.png|770px|right]]</th>
 +
  </tr>
 +
    <tr>
 +
        <td style="border-bottom: 1px solid white>
 +
<ol>   
 +
'''3.''' Select '''Type: Transport'''.
 +
<br>
 +
Do not forget to '''Save''' changes.
 +
</ol>
 +
        </td>
 +
    </tr>
 +
</table>
 +
----
 +
'''Note:''' ''This is only an example of a secure configuration. Other algorithms or even combinations of them could be used. However, we strongly recommend refraining from using older encryption and hashing algorithms unless support for certain legacy systems is required.''
 +
 +
Make the following changes:
 +
<table class="nd-othertables_2">
 +
    <tr>
 +
        <th width=330; style="border-bottom: 1px solid white;></th>
 +
        <th width=800; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_webui_manual_IPsec_configuration_proposal_phase1_settings_v1.png|border|class=tlt-border|671x336px|center]]</th>
 +
    </tr>
 +
    <tr>
 +
        <td style="border-bottom: 4px solid white>
 +
# Encryption - '''''AES256;'''''
 +
# Authentication - '''''SHA512;'''''
 +
# DH group - '''''MODP4096;'''''
 +
# IKE lifetime - '''86400s'''.
 
         </td>
 
         </td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
   −
===Firewall===
   
----
 
----
−
   
<table class="nd-othertables_2">
 
<table class="nd-othertables_2">
 
     <tr>
 
     <tr>
−
         <th width=355; style="border-bottom: 1px solid white;></th>
+
         <th width=330; style="border-bottom: 1px solid white;></th>
−
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>
+
         <th width=800; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_webui_manual_IPsec_configuration_proposal_phase2_settings_v1.png|border|class=tlt-border|644x331px|center]]</th>
−
[[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_11_v1.png|770px|right]]</th>
   
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
−
         <td style="border-bottom: 1px solid white>
+
         <td style="border-bottom: 4px solid white>
−
Now go to the '''Network → Firewall → General Settings''' page and press '''Edit''' button next to the L2TP forward rule:
+
# Encryption - '''''AES256;'''''
 +
# Authentication - '''''SHA512;'''''
 +
# PFS group - '''''MODP4096;'''''
 +
# Lifetime – '''''86400s;'''''
 
         </td>
 
         </td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
 +
 +
===Firewall===
 +
----
 +
Now go to the '''Network → Firewall → General Settings''' page
    
----
 
----
Line 134: Line 163:  
         <th width=355; style="border-bottom: 1px solid white;></th>
 
         <th width=355; style="border-bottom: 1px solid white;></th>
 
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>
 
         <th width=790; style="border-bottom: 1px solid white;" rowspan=2>
−
[[File:Networking_rutos_configuration_example_l2tp_over_ipsec_android_12_v1.png|770px|right]]</th>
+
[[File:RutOS_L2TP_IPsec_android_7.8_1.png|770px|right]]</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 140: Line 169:  
<ol>     
 
<ol>     
 
       <li>Set '''Forward: accept'''.</li>
 
       <li>Set '''Forward: accept'''.</li>
−
      <li>Select '''Covered networks: LAN'''.</li>
   
       <li>'''Save''' changes.</li>
 
       <li>'''Save''' changes.</li>
 
</ol>
 
</ol>
Retrieved from "https://wiki.teltonika-networks.com/view/Special:MobileDiff/65927...131128"

Navigation menu