Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

Question about adding L2TP alongside an existing point-to-point VPN donfiguration

$
0
0

Hi all,

 

Using an ER-8 under OS 1.8. Just got it the other week and loving it! Ripping fast, and handles my IPTV traffic as well.

 

I have successfully setup an IPSEC point-to-point VPN to attach to my work network. I now want to add an L2TP VPN alongside that so I can tunnel in when on the road, etc. The recipe given here, https://help.ubnt.com/hc/en-us/articles/204950294-EdgeMAX-L2TP-Server, looks good, but I'm guessing that I don't need to type all of that because some of it is done already for the point-to-point link.

 

Does the following seem correct?

 

Skip these three because they are already done for the point-to-point VPN:

 

set vpn ipsec ipsec-interfaces interface eth0
set vpn ipsec nat-traversal enable
set vpn ipsec nat-networks allowed-network 0.0.0.0/0

 

Do these (with parameters as approprate, of course):

 

set vpn l2tp remote-access dhcp-interface eth0

set vpn l2tp remote-access client-ip-pool start 192.168.100.101
set vpn l2tp remote-access client-ip-pool stop 192.168.100.110
set vpn l2tp remote-access ipsec-settings authentication mode pre-shared-secret
set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret "secret phrase"
set vpn l2tp remote-access authentication mode local

set vpn l2tp remote-access authentication local-users username testuser password testpassword
set vpn l2tp remote-access mtu 1492
set vpn l2tp remote-access dns-servers server-1 8.8.8.8
set vpn l2tp remote-access dns-servers server-2 8.8.4.4

 

Do I have the right? I don't want to trash my point-to-point VPN when setting up the L2TP access.

 

Thanks!

 

P.S. it'll be great when they add L2TP setup to the web GUI, but I'm getting a lot better at CLI fairly quickly Smile5

 


Viewing all articles
Browse latest Browse all 20028

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>