{{NeedsUpdate}}  This is a IPSECIPsec/L2TP VPN server implementation for Fedora 14 that allows Android OS (2.3 .5 or less) devices to connect to your HDA. It has been tested with Android OS 2.3 .5 via [http://www.samsung.com/us/mobile/cell-phones/SGH-I727MSAATT Samsung Galaxy S™ II Skyrocket™]. It may not work for all Android devices or may require some modification.

{{Code| yum -y install openswan xl2tpd}}

*Edit '''''/etc/ipsec.conf''''' with your favorite editor and update as follows ('''NOTE:''' Replace the ''{HDA IP Address}'' i.e. 192.168.0.10, ''{Router IP Address}'' i.e. 192.168.0.1, and xxx.xxx.xxx.xxx/24 i.e. 192.168.0.0/24 with the correct IP addresses for your network):{{Text|Text=<pre>config setup

<nowiki></nowiki>conn L2TP-PSK-NAT rightsubnet=vhost:%priv also=L2TP-PSK-noNAT<nowiki></nowiki>conn L2TP-PSK-noNAT authby=secret pfs=no auto=add keyingtries=3 rekey=no ikelifetime=8h keylife=1h type=transport left=<nowiki>{HDA IP Address}</nowiki> leftprotoport=17/1701 leftnexthop={Router IP Address} right=%any rightprotoport=17/0 rightsubnet=vhost:%no,%priv}}any</pre>

{{Text| {HDA IP Address} %any: "a_key_that_is_at_least_8_characters_long"}}

{{Text|Text=<pre>net.ipv4.ip_forward = 1

net.ipv4.conf.default.send_redirects = 0}}</pre>

{{Text|Text=<pre><nowiki>#</nowiki>net.bridge.bridge-nf-call-ip6tables = 0

<nowiki>#</nowiki>net.bridge.bridge-nf-call-arptables = 0}}</pre>  * To enable changes, do the following: sysctl -p

* Create '''''/usr/bin/disable_send_accept_redirectszl2tpset''''' and add the following:{{Text|Text=<pre><nowiki>#</nowiki>!/bin/bashfor each in /proc/sys/net/ipv4/conf/*"doecho 0 > \$each/accept_redirectsecho 0 > \$each/send_redirectsdone</pre>

<nowiki>#</nowiki> Disable accept redirects* Make it executableecho 0 > /proc/sys/net/ipv4/conf/all/accept_redirectsecho 0 > /proc/sys/net/ipv4/conf/default/accept_redirectsecho 0 > /proc/sys/net/ipv4/conf/eth0/accept_redirectsecho 0 > /proc/sys/net/ipv4 chmod 755 /confusr/lobin/accept_redirects}}zl2tpset

{{Text|Text= /rootusr/bin/disable_send_accept_redirects}}zl2tpset

{{Code| service ipsec start ipsec verify}}

* Edit '''''/etc/xl2tpd/xl2tpd.conf'''''and update to reflect as follows:** Ensure <code>ipsec saref = yes</code> is uncommented.** '''NOTE:''' The IP range is outside an actively used IP range. For example if your DHCP server assigns IPs between 192.168.10.10 and 192.168.10.100 you can use 192.168.10.150-192.168.10.200. Also, xl2tpd needs a local IP which is used for communication with PPP. Given example, you could use 192.168.10.101.<pre>[global]ipsec saref = no [lns default]ip range = 192.168.10.150-192.168.10.200local ip = 192.168.10.101require chap = yesrefuse pap = yesrequire authentication = yesppp debug = yespppoptfile = /etc/ppp/options.xl2tpdlength bit = yes</pre>

{{Text|Text= username * password *}}

{{Code| service xl2tpd start}}

{{code| chkconfig ipsec on chkconfig xl2tpd on}}

That's basically it, you can now setup your L2TP/IPSEC IPsec VPN client and try to connect.

[http://www.mindbug.org/2010/11/fedora-as-ipsecl2tp-vpn-server-for-mac.html Fedora as IPSECIPsec/L2TP VPN Server for Mac and Android]