{{NeedsUpdate}}  This is a IPSECIPsec/L2TP VPN server implementation for Fedora 14 that allows Android OS (2.3.5 or less) devices to connect to your HDA. It has been tested with Android OS 2.3.5 via [http://www.samsung.com/us/mobile/cell-phones/SGH-I727MSAATT Samsung Galaxy S™ II Skyrocket™]. It may not work for all Android devices or may require some modification.

{{Code| yum -y install openswan xl2tpd}}

*Edit '''''/etc/ipsec.conf''''' with your favorite editor and update as follows ('''NOTE:''' Replace the ''{HDA IP Address}'' i.e. 192.168.0.10, ''{Router IP Address}'' i.e. 192.168.0.1, and xxx.xxx.xxx.xxx/24 i.e. 192.168.0.0/24 with the correct IP addresses for your network):{{Text|Text=<pre>config setup

<nowiki></nowiki>conn L2TP-PSK-NAT rightsubnet=vhost:%priv also=L2TP-PSK-noNAT<nowiki></nowiki>conn L2TP-PSK-noNAT authby=secret pfs=no auto=add keyingtries=3 rekey=no ikelifetime=8h keylife=1h type=transport left=<nowiki>{HDA IP Address}</nowiki> leftprotoport=17/1701 leftnexthop={Router IP Address} right=%any rightprotoport=17/0 rightsubnet=vhost:%no,%priv}}any</pre>

{{Text| {HDA IP Address} %any: "a_key_that_is_at_least_8_characters_long"}}

{{Text|Text=<pre>net.ipv4.ip_forward = 1

net.ipv4.conf.default.send_redirects = 0}}</pre>

{{Text|Text=<pre><nowiki>#</nowiki>net.bridge.bridge-nf-call-ip6tables = 0

<nowiki>#</nowiki>net.bridge.bridge-nf-call-arptables = 0}}</pre>

* Create '''''/usr/bin/disable_send_accept_redirects''''' and add To enable changes, do the following:{{Text|Text=<nowiki>#</nowiki>!/bin/bash sysctl -p

* Create '''''/usr/bin/zl2tpset''''' and add the following:<pre><nowiki>#</nowiki> Disable accept redirectsecho 0 > !/procbin/sys/net/ipv4/conf/all/accept_redirectsbashecho 0 > for each in /proc/sys/net/ipv4/conf/default/accept_redirects*"doecho 0 > /proc/sys/net/ipv4/conf/eth0\$each/accept_redirectsecho 0 > \$each/procsend_redirectsdone</sys/net/ipv4/conf/lo/accept_redirects}}pre> 

{{Code| chmod 755 /usr/bin/disable_send_accept_redirects}}zl2tpset

{{Text|Text= /rootusr/bin/disable_send_accept_redirects}}zl2tpset

{{Code| service ipsec start ipsec verify}}

* Edit '''''/etc/xl2tpd/xl2tpd.conf'''''and update to reflect as follows:** Ensure <code>ipsec saref = yes</code> is uncommented.** '''NOTE:''' The IP range is outside an actively used IP range. For example if your DHCP server assigns IPs between 192.168.10.10 and 192.168.10.100 you can use 192.168.10.150-192.168.10.200. Also, xl2tpd needs a local IP which is used for communication with PPP. Given example, you could use 192.168.10.101.<pre>[global]ipsec saref = no [lns default]ip range = 192.168.10.150-192.168.10.200local ip = 192.168.10.101require chap = yesrefuse pap = yesrequire authentication = yesppp debug = yespppoptfile = /etc/ppp/options.xl2tpdlength bit = yes</pre>

{{Text|Text= username * password *}}

{{Code| service xl2tpd start}}

{{code| chkconfig ipsec on chkconfig xl2tpd on}}

That's basically it, you can now setup your L2TP/IPSEC IPsec VPN client and try to connect.

[http://www.mindbug.org/2010/11/fedora-as-ipsecl2tp-vpn-server-for-mac.html Fedora as IPSECIPsec/L2TP VPN Server for Mac and Android]