IPSEC/L2TP VPN Server - Revision history

Bigfoot65 at 03:58, 23 June 2020

2020-06-23T03:58:12Z

Bigfoot65 at 16:26, 5 April 2014

2014-04-05T16:26:20Z

Bigfoot65: /* Set Services to Start on Boot */

2012-03-05T01:46:29Z

Set Services to Start on Boot

Bigfoot65: /* Configure xl2tpd */

2012-03-05T01:42:34Z

Configure xl2tpd

Bigfoot65: /* Configure PPP */

2012-03-05T01:36:22Z

Configure PPP

Bigfoot65: /* Configure xl2tpd */

2012-03-05T01:36:15Z

Configure xl2tpd

Bigfoot65: /* Configure PPP */

2012-03-05T01:35:12Z

Configure PPP

Bigfoot65: /* Configure xl2tpd */

2012-03-05T01:34:03Z

Configure xl2tpd

Bigfoot65: /* Configure Openswan */

2012-03-05T01:33:49Z

Configure Openswan

Bigfoot65: /* Configure Openswan */

2012-03-05T01:33:34Z

Configure Openswan

@@ Line 12: / Line 12: @@
 ===Setup===
 Install the packages first as root user:
-{{Code|yum -y install openswan xl2tpd}}
+ yum -y install openswan xl2tpd
 ====Configure Openswan====
 *Edit '''''/etc/ipsec.conf''''' with your favorite editor and update as follows ('''NOTE:'''  Replace the ''{HDA IP Address}'' i.e. 192.168.0.10 and xxx.xxx.xxx.xxx/24 i.e. 192.168.0.0/24 with the correct IP addresses for your network):
-{{Text|Text=config setup
+<pre>
          protostack=netkey
          nat_traversal=yes
@@ Line 40: / Line 41: @@
      leftprotoport=17/1701
      right=%any
-     rightprotoport=17/%any}}
+     rightprotoport=17/%any</pre>
 * Add the following to '''''/etc/ipsec.d/hda.secrets''''':
-{{Text|{HDA IP Address} %any: "a_key_that_is_at_least_8_characters_long"}}
+ {HDA IP Address} %any: "a_key_that_is_at_least_8_characters_long"
 * Edit '''''/etc/sysctl.conf''''' and add following to the file:
-{{Text|Text=net.ipv4.ip_forward = 1
+<pre>
 net.ipv4.conf.default.accept_redirects = 0
-net.ipv4.conf.default.send_redirects = 0}}
+net.ipv4.conf.default.send_redirects = 0</pre>
 * In the same file, disable the following by adding a #:
-{{Text|Text=<nowiki>#</nowiki>net.bridge.bridge-nf-call-ip6tables = 0
+<pre>
 <nowiki>#</nowiki>net.bridge.bridge-nf-call-iptables = 0
-<nowiki>#</nowiki>net.bridge.bridge-nf-call-arptables = 0}}
+<nowiki>#</nowiki>net.bridge.bridge-nf-call-arptables = 0</pre>
 * To enable changes, do the following:
-{{Code|sysctl -p}}
+ sysctl -p
 * Create '''''/usr/bin/zl2tpset''''' and add the following:
-{{Text|Text=<nowiki>#</nowiki>!/bin/bash
+<pre>
 for each in /proc/sys/net/ipv4/conf/*"
 do
 echo 0 > \$each/accept_redirects
 echo 0 > \$each/send_redirects
-done}}
+done</pre>
 * Make it executable
-{{Code|chmod 755 /usr/bin/zl2tpset}}
+ chmod 755 /usr/bin/zl2tpset
 * Add the following to '''''/etc/rc.local''''' so this script runs on boot:
-{{Text|Text=/usr/bin/zl2tpset}}
+ /usr/bin/zl2tpset
 * To verify everything is set correctly, do the following:
-{{Code|service ipsec start
+ service ipsec start
-ipsec verify}}
+ ipsec verify
@@ Line 91: / Line 95: @@
 * Edit '''''/etc/xl2tpd/xl2tpd.conf''''' and update to reflect as follows:
 '''NOTE:'''  The IP range is outside an actively used IP range. For example if your DHCP server assigns IPs between 192.168.10.10 and 192.168.10.100 you can use 192.168.10.150-192.168.10.200. Also, xl2tpd needs a local IP which is used for communication with PPP.  Given example, you could use 192.168.10.101.
-{{Text|Text=[global]
+<pre>
 ipsec saref = no
@@ Line 102: / Line 107: @@
 ppp debug = yes
 pppoptfile = /etc/ppp/options.xl2tpd
-length bit = yes}}
+length bit = yes</pre>
 ====Configure PPP====
 * Add following to '''''/etc/ppp/chap-secrets''''' (replace username and password accordingly):
-{{Text|Text=username * password *}}
 * Check '''''/etc/ppp/options.xl2tpd''''' to verify that all ''ms-dns'' entries point to the correct nameservers (the HDA).
 *Start xl2tpd:
-{{Code|service xl2tpd start}}
+ service xl2tpd start
 ====Configure Router====
@@ Line 115: / Line 121: @@
 ====Set Services to Start on Boot====
-{{code|chkconfig ipsec on
+ chkconfig ipsec on
-chkconfig xl2tpd on}}
+ chkconfig xl2tpd on
 That's basically it, you can now setup your L2TP/IPsec VPN client and try to connect.

@@ Line 4: / Line 4: @@
 heading	=WARNING|
 message = This is recommended only for advanced users, proceed with caution.}}
 This is a IPsec/L2TP VPN server implementation for Fedora 14 that allows Android OS (2.3.5 or less) devices to connect to your HDA.  It has been tested with Android OS 2.3.5 via [http://www.samsung.com/us/mobile/cell-phones/SGH-I727MSAATT Samsung Galaxy S™ II Skyrocket™].  It may not work for all Android devices or may require some modification.

← Older revision		Revision as of 01:46, 5 March 2012
Line 122:		Line 122:

	[https://lists.openswan.org/pipermail/users/2008-March/014218.html Installing OpenSwan for the first time]		[https://lists.openswan.org/pipermail/users/2008-March/014218.html Installing OpenSwan for the first time]
		+
		+	[http://www.linuxhelp.in/2011/06/installing-and-configuring-l2tp-vpn.html Installing and configuring l2tp vpn using xl2tpd]

	===Android L2TP/IPsec Client Setup===		===Android L2TP/IPsec Client Setup===

@@ Line 92: / Line 92: @@
 [lns default]
 ip range = 192.168.10.150-192.168.10.200
-local ip = 192.168.10.101require chap = yes
+local ip = 192.168.10.101
 refuse pap = yes
 require authentication = yes
@@ Line 98: / Line 99: @@
 pppoptfile = /etc/ppp/options.xl2tpd
 length bit = yes}}
 ====Configure PPP====

@@ Line 98: / Line 98: @@
 pppoptfile = /etc/ppp/options.xl2tpd
 length bit = yes}}
 ====Configure PPP====

← Older revision		Revision as of 01:34, 5 March 2012
Line 82:		Line 82:

	* Everything should be "green" except ''SAref kernel support'' ('''N/A''') and ''Opportunistic Encryption'' ('''DISABLED''').		* Everything should be "green" except ''SAref kernel support'' ('''N/A''') and ''Opportunistic Encryption'' ('''DISABLED''').
		+

	====Configure xl2tpd====		====Configure xl2tpd====

← Older revision		Revision as of 01:33, 5 March 2012
Line 55:		Line 55:


−	* To enable ~~changed~~, do the following:	+	* To enable changes, do the following:
	{{Code\|sysctl -p}}		{{Code\|sysctl -p}}