Editing Template:Netoworking rutx configuration example mikrotik l2tp ipsec

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 15: Line 15:
 
==Configuration scheme==
 
==Configuration scheme==
  
[[File:Networking_rutx_configuration_example_l2tp_ipsec_mikrotik_topology_v1.png|border|class=tlt-border|1100x1100px]]
+
[[File:Networking_rutxxx_configuration_example_l2tp_ipsec_mikrotik_topology_v1.png|border|class=tlt-border|1100x1100px]]
  
 
==Mikrotik configuration==
 
==Mikrotik configuration==
Line 59: Line 59:
 
==RUT configuration==
 
==RUT configuration==
  
Access RUTXxx WebUI and go to '''Services > VPN > L2TP'''. There create a new configuration by selecting role '''Client''', writing '''New configuration name''' and pressing '''Add''' button. It should appear after a few seconds. Then press '''Edit'''.
+
Access RUTXxx WebUI and go to '''Services > VPN > L2TP'''. There create a new configuration by selecting role '''Client'', writing '''New configuration name''' and pressing '''Add''' button. It should appear after a few seconds. Then press '''Edit'''.
  
 
[[File:Networking_rutx_configuration_example_l2tp_ipsec_mikrotik_3_v1.png|border|class=tlt-border|1100x1100px]]
 
[[File:Networking_rutx_configuration_example_l2tp_ipsec_mikrotik_3_v1.png|border|class=tlt-border|1100x1100px]]
Line 71: Line 71:
 
# Write '''Username''' (write the username which you created with this command /ppp secret add name="username" password="password" service=l2tp profile=ipsec_vpn remote-address=192.168.102.2).
 
# Write '''Username''' (write the username which you created with this command /ppp secret add name="username" password="password" service=l2tp profile=ipsec_vpn remote-address=192.168.102.2).
 
# Write '''Password''' (write the password which you created with this command /ppp secret add name="username" password="password" service=l2tp profile=ipsec_vpn remote-address=192.168.102.2).
 
# Write '''Password''' (write the password which you created with this command /ppp secret add name="username" password="password" service=l2tp profile=ipsec_vpn remote-address=192.168.102.2).
# Press '''Save & Apply'''.
+
# Press '''Save'''.
  
 
Now go to '''Services > VPN > IPsec'''.
 
Now go to '''Services > VPN > IPsec'''.
Line 84: Line 84:
  
 
# '''Enable''' instance.
 
# '''Enable''' instance.
# Write '''Remote endpoint''' (MikroTik public IP address).
 
# Sellect '''Authentication method''' (Pre-shared key)
 
# Write '''Pre-shared key''' (write the password which you created with this command /ip ipsec identity add generate-policy=port-override auth-method=pre-shared-key secret="password" peer=l2tpserver).
 
 
# Select '''Type''' (Transport).
 
# Select '''Type''' (Transport).
# Select '''Encryption algorithm, Authentication''' and '''DH group''' (sellect options that you set with command /ip ipsec proposal set default auth-algorithms=sha1 enc-algorithms=3des pfs-group=modp1024).
+
# Write '''Remote VPN endpoint''' (MikroTik public IP address).
 +
# Select '''DH group''' (MODP1024)
 
# Set all of the settings in '''Phase 2''' to be exactly the same as in the '''Phase 1'''.
 
# Set all of the settings in '''Phase 2''' to be exactly the same as in the '''Phase 1'''.
# Press '''Save & Apply'''.
+
# Press '''Save'''.
 
+
# Write '''Pre-shared key''' (write the password which you created with this command /ip ipsec identity add generate-policy=port-override auth-method=pre-shared-key secret="password" peer=l2tpserver ).
 
+
# Press '''Save'''.
  
 
==Testing configuration==
 
==Testing configuration==

Please note that all contributions to Teltonika Networks Wiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see Teltonika Networks Wiki:Copyrights for details). Do not submit copyrighted work without permission!

Cancel Editing help (opens in new window)