Difference between revisions of "Template:Netoworking rutxxx configuration example mikrotik l2tp ipsec"

From Teltonika Networks Wiki
(Created page with "==Introduction==")
 
Line 1: Line 1:
 
==Introduction==
 
==Introduction==
 +
 +
Because of the lack of confidentiality inherent in the Layer 2 Networking Protocol (L2TP) protocol, Internet Protocol Security (IPsec) is often used to secure L2TP packets by providing confidentiality, authentication and integrity. The combination of these two protocols is generally known as L2TP over IPsec (or simply L2TP/IPsec).
 +
 +
This article provides a guide on how to configure L2TP/IPsec tunnel between RUTxxx and Mikrotik routers.
 +
 +
==Prerequisites==
 +
 +
* One RUTxxx router of any type
 +
* One Mikrotik router (this configuration example was created using Mikrotik rb750gr3)
 +
* Server must have a Public Static or Public Dynamic IP address
 +
* At least one end device (PC, Laptop) to configure the routers
 +
* WinBox application
 +
 +
==Configuration scheme==
 +
 +
==Mikrotik configuration==
 +
 +
Connect to MikroTik by using '''WinBox''' application and press '''New Terminal'''.
 +
 +
[[File:]]
 +
 +
The first step is to create a PPP Profile on the MikroTik. Use a 192.168.102.1 for the local address (the VPN Gateway), assuming this is not already in use. You will also need to add a DNS Server. Use this command:

Revision as of 17:45, 28 February 2020

Introduction

Because of the lack of confidentiality inherent in the Layer 2 Networking Protocol (L2TP) protocol, Internet Protocol Security (IPsec) is often used to secure L2TP packets by providing confidentiality, authentication and integrity. The combination of these two protocols is generally known as L2TP over IPsec (or simply L2TP/IPsec).

This article provides a guide on how to configure L2TP/IPsec tunnel between RUTxxx and Mikrotik routers.

Prerequisites

  • One RUTxxx router of any type
  • One Mikrotik router (this configuration example was created using Mikrotik rb750gr3)
  • Server must have a Public Static or Public Dynamic IP address
  • At least one end device (PC, Laptop) to configure the routers
  • WinBox application

Configuration scheme

Mikrotik configuration

Connect to MikroTik by using WinBox application and press New Terminal.

[[File:]]

The first step is to create a PPP Profile on the MikroTik. Use a 192.168.102.1 for the local address (the VPN Gateway), assuming this is not already in use. You will also need to add a DNS Server. Use this command: