Hi all,
Using an ER-8 under OS 1.8. Just got it the other week and loving it! Ripping fast, and handles my IPTV traffic as well.
I have successfully setup an IPSEC point-to-point VPN to attach to my work network. I now want to add an L2TP VPN alongside that so I can tunnel in when on the road, etc. The recipe given here, https://help.ubnt.com/hc/en-us/articles/204950294-EdgeMAX-L2TP-Server, looks good, but I'm guessing that I don't need to type all of that because some of it is done already for the point-to-point link.
Does the following seem correct?
Skip these three because they are already done for the point-to-point VPN:
set vpn ipsec ipsec-interfaces interface eth0
set vpn ipsec nat-traversal enable
set vpn ipsec nat-networks allowed-network 0.0.0.0/0
Do these (with parameters as approprate, of course):
set vpn l2tp remote-access dhcp-interface eth0
set vpn l2tp remote-access client-ip-pool start 192.168.100.101
set vpn l2tp remote-access client-ip-pool stop 192.168.100.110
set vpn l2tp remote-access ipsec-settings authentication mode pre-shared-secret
set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret "secret phrase"
set vpn l2tp remote-access authentication mode local
set vpn l2tp remote-access authentication local-users username testuser password testpassword
set vpn l2tp remote-access mtu 1492
set vpn l2tp remote-access dns-servers server-1 8.8.8.8
set vpn l2tp remote-access dns-servers server-2 8.8.4.4
Do I have the right? I don't want to trash my point-to-point VPN when setting up the L2TP access.
Thanks!
P.S. it'll be great when they add L2TP setup to the web GUI, but I'm getting a lot better at CLI fairly quickly