Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 9 replies
  • Answers 2 answers
  • Subscribers 27 subscribers
  • Views 22712 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

L2TP over IPsec remote access VPN

James Reader

I am trying to setup VPN access to our lan for sales people, etc.  I have been able to successfully connect the L2tp tunnel, and it shows 2 green dots when I am connected, however the IPsec tunnel only shows active and never shows connected, and only a few Kb of traffic transit the firewall VPN to WAN rule.  No traffic transits the VPN to LAN or LAN to VPN firewall rules.  I am connecting with the native android client.  Below are my IPsec policy settings.  I am using the default L2TP policy for L2TP settings.

 

I am assuming that the IPsec status should show two green dots as well as the L2TP showing both green.  Is this correct?  What am I missing?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to lferrara

    I am specifically trying to configure L2TP OVER IPsec.  I have followed the article and it addresses only part of what I am trying to do.  

  • 0 in reply to James Reader

    The IPsec profile you are sharing is for a site to site VPN. Delete the IPSec profile and follow the KB.

    Thanks

  • 0 in reply to lferrara

    You keep telling me to follow that article... THAT HAS NOTHING TO DO WITH IPSEC. If you know that the profile i shared is for a site-to-site vpn, then what settings should i use for a client-to-site VPN?  Again, referring me to an unrelated article is NOT helpful.

  • 0 in reply to James Reader

    James,

    please clarify what you are try to achieve.

    Thanks

  • 0 in reply to lferrara

    I am configuring an L2TP/IPsec VPN tunnel.  

    I have it working now.

    My IPsec profile was fine.  I had a couple of mis-configurations on my firewall rules that were preventing traffic.

    I had set a primary gateway on my LAN-VPN rule that had to be removed, I had also configured NAT that had to be disabled, and finally, I had designated IP addresses for L2TP in the same range as my LAN, which was causing a conflicting virtual adapter to be created, so that had to be removed.  

     

    NONE of these issues were addressed in the article you linked and repeatedly insisted I read and follow, btw.  

    Since I haven't seen this well documented anywhere, here is how to COMPLETELY configure L2TP/IPsec VPN.

    The firewall rules you must have:

    I am using the built-in DefaultL2TP policy for both IPsec and L2TP connections.  The IPsec connection indicator never goes green, but the logs indicate a successful negotiation and hand off to L2TP.

  • 0 in reply to James Reader

    Hi.  I followed the steps for L2TP.  I also like to find out how to have L2TP/ IPsec setup.  What additional steps should be done?  What settings need to be ticked?  This is of course aside from the firewall rule you already posted.

    As I understand, the IPsec provides encryption to traffic that passes through, correct?