IPsec VPN服务器上的L2TP

20 comments

1. I have treed this on several Edge Routers it works perfectly connecting via windows (all versions) but on iOS just does not work. It's been a year of messing around and still no connection.

2. Tony would be nice if you give the cli commands for the firewall rules.

3. i am having error in android phone , can you help me ?

4. Excellent tutorial! Easy as hell, thank you very much

5. Can you please help? I cannot make the config working with Windows client – https://community.ui.com/questions/Tried-probably-everything-but-Windows-Client-cannot-connect-to-L2TP-VPN-ER-X/dcef7b5b-de47-4fbb-9817-1c8c3be451e4

6. Followed this amazing tutorial and managed to set up L2TP over IPsec VPN server on my ER-X-SFP without any trouble. I use my ddns.net as my server address. If I'm outside (not on my network), for example in McDonald's or Tim Hortons, using free WiFi, I can connect to my home router VPN, no problems at all, almost instantly. If I try to connect to it while I'm at home, on my home network, attempt is always unsuccessful. I really want to learn as to why that happens, and if there is any way to set it up differently so I can use my own VPN server at home too. Thank you so much in advance Tony!

7. Hi Tony, great video! However, when I try to connect from Windows 10 using the built-in VPN client, I get "The connection was prevented because of a policy configured on your RAS/VPN server. Specifically, the authentication method used by the server to verify your username and password does not match…".

   However, I followed your instructions down to a T for both the server and client. The client is setup as L2TP/IPSec PSK. Are you aware of this error and what's causing it?

8. Appreciate this video very much. Been looking for a simple explanation like this. Thank you.

9. Hey Tony,
   I updated my firmware and it broke my VPN which was setup following your instructions.
   Any chance you could update this for firmware version 2.0.3?
   I think what breaks is somewhere around step 6
   Thanks so much.
   Dave

10. Tony, A couple of those commands have been depredated. Time for an update of this very useful video?
    Even this: https://help.ubnt.com/hc/en-us/articles/204950294 is not completely accurate.

11. I have a new question about the firewall rules (IKE, L2TP …). When the rules are created, in the Advanced> State section you will find the options of: established, invalid, new and related. In my case, I do not have any of them marked, should I mark any of them? Which one would they be?

12. I have no problem following the video to connect iphone to the home VPN, however I just can't get it to connect on Android device, anyone got the same problem?

13. Great Video. I got everything setup except the Dynamic DNS. Are the following steps close to what I need to do. 1. Buy or get free DNS service from noip.com (or similar). 2. Under Services – DNS input the Dynamic DNS service (hostname, login, password etc). 3. Go to Firewall/NAT -> Port forward to forward the incoming connection?? To summarize, I don't know how to configure the Dynamic DNS on the Edge router to make it work with the VPN solution your describing. Thanks

14. Well done sir. Thank you for taking the time to create this video.

15. Thank u so much Tony!
    This worked out amazingly.

16. Great video and easy to set up no issues just followed the steps Thank you!! . I just have 1 question, I require 3 different users. One for me no problem but require 2 more (wife and son) is there any more configuration to do? Or just add the users via GUI ?

17. DOES NOT WITH ANDROID.BECAUSE L2TP SECRECT NOT USED.
    REQUIRES PRE -SHARED KEY.
    TOTAL NEWBIE .IF INSTRUCTIONS DON'T WORK .TOTALLY USELESS TO ME.
    ANOTHER HOUR I HAVE WASTED IN MY LIFE …DO NOT WASTE YOUR TIME IF YOUR A ANDROID USER .ANDROID CLIENT DID NOT WORK FOR ME .

    APPLE ONLY TUTORIAL

18. Hello
    I have a question for you and meby others. When i used that configuration of VPN. I can't see any computer in lan from remote network. How can i connect to my office and work with sql for example… Thakn you 🙂

19. Setting this up on an ER 4. I'm pretty sure we use a static IP for the WAN. What should be my input for ipsec/ipsec-interfaces setting?

20. Thanks for this.

    I was troubleshooting a existing configuration. it seems these lines were missing:

    ipsec-interfaces {
    
    interface eth0
    
    }
    
    nat-networks {
    
    allowed-network xxx.xxx.xxx.xxx/xx {
    }
    
    }
    
    nat-traversal enable

    Interestingly, prior to adding the above lines, this was the Windows error code "Error Description: 809: The network connection between your computer and the VPN server could not be established because the remote server is not responding. This could be because one of the network devices (e.g, firewalls, NAT, routers, etc)"

    So the IPSec interface wasn't defined and NAT traversal wasn't enabled.

Comments are closed.