L2TP/IPSec client

[generalzod]

Has anyone successfully setup a GL.iNet device to act as a L2TP/IPSec client?

Some time ago, I tried various methods using the packages xl2tpd and strongswan-ipsec but was never able to get traffic routed across the tunnel correctly.

Note that the following guides are inadequate, as they only serve to establish an L2TP interface.

Supporting L2TP and PPTP in firmware 3.203

Firmware 3.203 uses OpenWrt 1907 which does not have luci-proto-pptp and luci-proto-l2tp packages. So here is how you can set up pptp and l2tp in luci. Step 1: Install Luci In firmware 3.203, first go to advanced settings and you are prompted to install Luci. Click the button and install it. After you install, click the Luci link and go to Luci. [image] [image] [image] After you go to luci->network->interfaces, add a new interface, you do not have pptp and l2tp [image] Step 2: Instal…

L2TP VPN Guide

Tested using GL-MT300N-V2 ver.4.3.18 Install xl2tpd Reboot device Open LuCI console.gl-inet.com/cgi-bin/luci Create network interface of type L2TP Set L2TP Server IP address (not host name), login and password Set firewall zone => wan (needed for masquerading) Use default gateway = YES Use gateway metic = 20 Networking => Routing => add static route to VPN server through WAN interface Edit wan interface, don't use default gateway Use gateway metric = 50 Save, apply, reboot Note: this guide do…

What I need is to configure the interface (with username/password) and establish an IPSec tunnel using a pre-shared secret.

Has anyone configured this successfully?

(Note: I am not looking for a discussion of the merits of WireGuard or OpenVPN vs. L2TP. This is a customer requirement, as they have a VPN infrastructure based on L2TP/IPSec server.)