How to add IPSEC/L2TP support?

fritz · 2018-03-28T14:25:53.884Z

I try to connect to my “Softether Server on my Home PC (Windows 10)”.
I install the firmware 2.27 on my “GL-AR300M” Router and configure the L2TP Client.
The connection does not work, I can not connect to my Softether Server.

I setup the client on my “Samsung S8+” and the connection to the Softether Server work perfect.

Is there a problem in “testing Version 2.27” ??

Please can you check the firmware 2.27 ??

any suggestions… ?!?

Home PC <----- L2tp/ipsec -----> GL-AR300M <-----------> client “n”
Softether
Server

best regards

alzhao · 2018-03-29T16:21:34.036Z

Is it L2TP via Ipsec? I don’t think it works now. But if only L2TP should work.

fritz · 2018-03-30T10:30:39.366Z

The Softether Server ( more Info under https://www.softether.org )

work with L2TP over IPsec Pre Shared Key

This “Software” VPN Server is very fast and also easy to configure.

please can you try to solve the problem and create a new “testing” Firmware??

best regards

alzhao · 2018-04-03T03:45:14.062Z

I think someone have tested softether on the router and performance is not increased a lot.

IPSec works much better in B1300 because it has hardware acceleration. Will try in this router.

fritz · 2018-04-12T18:59:40.227Z

Any News?
Are you work on the issue “L2TP over IPsec Pre Shared Key”?
Please can you create a new Test Version?
best regards

fritz · 2018-05-15T08:54:54.940Z

fritz:

Any News?

Are you work on the issue “L2TP over IPsec Pre Shared Key”?

Are you working on the issue “L2TP over IPsec Pre Shared Key” for Softether Client function?

alzhao · 2018-05-16T03:37:23.468Z

No we are not working on IPSec now. But rather we will use Wireguard.

fritz · 2018-06-04T09:09:12.620Z

But rather we will use Wireguard…

Ohh that is not so fine… I think for the moment wireguard-Server not runs on a Windows system, it runs only on linux.
Therefore it is better to getting the function “L2TP over IPsec Pre Shared Key” for Softether Client” to run.
I think there are lot of people there are waiting for this function.

Windows PC <----- L2tp/ipsec/Pre Shared Key -----> GL-AR300M <-----------> client “n”
Softether
Server

best regards

alzhao · 2018-06-04T12:23:59.517Z

why server has to be Windows? On B1300 Wireguard server achieves 100 to 200Mbps which is fast enough.

notsofast · 2018-07-10T01:22:09.086Z

One more vote for L2TP over IPsec with Pre-shared Key. I need it to connect to a Meraki MX VPN.

Dragonfly · 2018-07-12T09:34:46.891Z

EDIT:
Sorry wrong thread - moved over here: How I build a VPN tunnel to Fritzbox 7490? - #6 by Dragonfly

Ole · 2018-07-24T20:31:49.395Z

Hi,

Is there any news on a L2TP Client with pre-shared key /ipsec?
I have a UniFi security gateway running which just provides a VPN tunnel using ipsec on l2tp.
Perhaps some testing firmware ? I would prefere a solution using Luci ui.

Regards

harris73 · 2018-10-02T16:33:02.846Z

Hi everyone

Glad to find this forum. I was a potential purchaser of one of the travel routers, as I need L2TP with pre-shared key. As it looks like it’s not supported, I’m going to hold off purchasing one of these until it’s ready.

I already have a router that provides an L2TP server and it doesn’t support OpenVPN. I’m also not keen on replacing the router.

alzhao · 2018-10-03T10:18:30.646Z

we have ever tried l2tp and ipsec with pre shared key. It is very complicated and difficult to make it work, especially compatible with different servers. So gave up.

kyoto · 2018-10-12T18:12:38.517Z

Hi alzhao,

When I tried to make a new L2TP interface it tells me “The submitted security token is invalid or already expired”.
Could you walk me through how I can succesfully setup a L2TP interface so I can establish the client side to connect to a L2TP server on a SonicWall firewall.

Thank you!

bybor · 2018-11-06T13:26:42.987Z

I have AR150, running 2.27 (stable). In short, it can connect to L2TP over IPSec with pre-shared key (server is my router (zyxel keenetic extra ii)). I can also establish VPN connection to the same router from my android 6 phone.
AR150 is running in WISP mode. I configured it under “OpenVPN” tab, “PPTP Client beta” menu. I’m using it the first day, cannot tell how reliable it is. It lost VPN connection at some moment, I had to click “Apply” button which made AR150 to reboot, and it connected after that.
Looking at this thread, it doesn’t look like it’s officially supported, not sure if it may be removed in the future? But if you have this firmware available for your gl.inet device, I’d give it another try.

rk47 · 2018-11-06T19:20:12.119Z

ic84:

Is anyone aware of an easy way to add IPSec/L2TP support?

It appears that is not well supported on OpenWRT, and none of the major projects* have a fully functional GUI with easy setup procedure for this platform .
(* OpenSwan, LibreSwan, StrongSwan)

alzhao · 2018-11-07T10:38:09.350Z

bybor:

Looking at this thread, it doesn’t look like it’s officially supported, not sure if it may be removed in the future? But if you have this firmware available for your gl.inet device, I’d give it another try.

L2TP/IPsec is removed from firmware 3.x because it doesn’t works good with some servers. Seems there are different implementations.

rk47 · 2018-11-09T01:56:30.732Z

alzhao:

L2TP/IPsec is removed from firmware 3.x because it doesn’t works good with some servers.

Also the GUI appears to have some bugs:

On v2 firmware, after testing IPSEC and then returning to OpenVPN, the “Force VPN” feature quit working and traffic did not go through VPN even when OpenVPN says “connected.” I only discovered this by accident when a web site showed the name of my ISP. So there might be some mistake in the script which sets the firewall rules.

I know its more difficult to implement stateful verification, but I wish I could trust the GUI to accurately reflect the status of the firewall & virtual network adapter.

notsofast · 2019-05-30T13:26:23.552Z

L2TP/IPsec with preshared key did work for me in 2.27 (but marked beta). Then I upgraded to 3.x and found it was gone.

Is there any chance you will try to put it back? It looks like there is an L2TP in 3.x but no way to enter the preshared key.