Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

Official EdgeRouter documentation on L2TP VPN is out of date?

$
0
0

Hi,

 

Is the official documentation for setting up a L2TP VPN server still accurate?

 

https://help.ubnt.com/hc/en-us/articles/204950294-EdgeMAX-L2TP-Server

https://help.ubnt.com/hc/en-us/articles/204959404-EdgeMAX-Set-up-L2TP-over-IPsec-VPN-server

 

For example, based on the above, you might end up with a configuration like this (this is for a dual-WAN setup):

 

 ipsec {
     ipsec-interfaces {
         interface eth0
         interface eth1
     }
     nat-networks {
         allowed-network 0.0.0.0/0 {
         }
     }
     nat-traversal enable
 }
 l2tp {
     remote-access {
         authentication {
             local-users {
                 username SANITISED {
                     password SANITISED
                 }
             }
             mode local
         }
         client-ip-pool {
             start 192.168.2.20
             stop 192.168.2.30
         }
         dns-servers {
             server-1 8.8.8.8
             server-2 8.8.4.4
         }
         ipsec-settings {
             authentication {
                 mode pre-shared-secret
                 pre-shared-secret SANITISED
             }
         }
         mtu 1492
         outside-address 0.0.0.0
     }
 }

 

However,  mentioned at https://community.ubnt.com/t5/EdgeMAX/L2TP-VPN-Unreliable-on-1-8-5-Dual-WAN/m-p/1610846 that the following options are actually deprecated:

 

ipsec-interfaces  Interface to use for VPN (DEPRECATED)
nat-networks      Network Address Translation (NAT) networks (DEPRECATED)
nat-traversal     Network Address Translation (NAT) traversal (DEPRECATED)


Yet they're still mentioned at https://help.ubnt.com/hc/en-us/articles/204950294-EdgeMAX-L2TP-Server and https://help.ubnt.com/hc/en-us/articles/204959404-EdgeMAX-Set-up-L2TP-over-IPsec-VPN-server

 

Also, he also mentioned this setting:

 

auto-firewall-nat-exclude disable

 

 but that's not covered in the documentation at all - is it possible to provide some help on this, so we know what it's for, or whether we need to use it?

 

Would be great if we could just get a sample of what the current L2TP VPN configuration should be (since there's no VPN wizard yet - although if we could just get one of those, that might be pretty awesome...haha).


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>