# L2TP VPN connection

**URL:** <https://forum.gl-inet.com/t/l2tp-vpn-connection/39037>\
**Category:** Router\
**Created:** [February 25, 2024, 2:46pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037 "2024-02-25T14:46:16Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![depechefan](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/7cd45c/32.png) [@depechefan](https://forum.gl-inet.com/u/depechefan)\
**Post date:** [February 25, 2024, 2:46pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/1 "2024-02-25T14:46:16Z")

</div>

Hi all,

I have a GL.Inet GL-A1300. I need to connect to a VPN server using L2TP. I followed this guide: [Supporting L2TP and PPTP in firmware 3.203](https://forum.gl-inet.com/t/supporting-l2tp-and-pptp-in-firmware-3-203/16837) to add L2TP functionality to my router. If I try to create a new interface then I can see L2TP as an option so I guess something worked. But how do I set up a connection? In the GUI I only see options for WireGuard and OpenVPN. And I can use both of these protocols just fine but my own VPN server can only be configured to use L2TP…  
Help is much appreciated!

Thanks  
/M

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [February 25, 2024, 2:57pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/2 "2024-02-25T14:57:59Z")

</div>

> [@depechefan](#):
>
> And I can use both of these protocols just fine but my own VPN server can only be configured to use L2TP…

L2TP isn’t a safe protocol for VPN because it’s not for encrypting traffic. You will need IPsec as well, which opens up an entirely new space of complexity.

If it’s somehow possible, you should get rid of both - it won’t make much fun to implement it using OpenWrt because it’s not supported in an easy way (like a GUI for example)

---

<div class="post-metadata">

**Author:** ![depechefan](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/7cd45c/32.png) [@depechefan](https://forum.gl-inet.com/u/depechefan)\
**Post date:** [February 25, 2024, 3:06pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/3 "2024-02-25T15:06:36Z")

</div>

Thanks. I understand the shortcomings of L2TP. However that is the only option that I have just now. Unless I buy a new router… I have a Ubiquity USG as my primary router. But if it isn’t possible then so be it. I just don’t understand why you even have the option to install the l2tpd package if this is the case

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [February 25, 2024, 3:10pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/4 "2024-02-25T15:10:43Z")

</div>

Pretty sure you can use L2TP (+ IPsec) with OpenWrt - but maybe not with a nice GUI.  
Might be behind of scope of this forum.

---

<div class="post-metadata">

**Author:** ![steep01](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a3d4f5/32.png) [@steep01](https://forum.gl-inet.com/u/steep01)\
**Post date:** [February 25, 2024, 5:30pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/5 "2024-02-25T17:30:50Z")

</div>

Even Ubiquiti recommends switching to modern VPN like wireguard.

> **[UniFi Gateway - L2TP VPN Server](https://help.ui.com/hc/en-us/articles/12594825307927-UniFi-Gateway-L2TP-VPN-Server)**
>
> L2TP is a traditional VPN server found in the Teleport & VPN section of your Network application that allows you to connect to the UniFi network from a remote location. A UniFi Gateway or UniFi...

Having said this, it should be possible to configure xl2tp to connect. I added the packages and from the luci admin page Network-\>Interfaces can add a new L2TP interface on the WAN interface and see the options to enter the address for the L2TP server and the user name and password.

 ![Screenshot 2024-02-25 at 10.21.30 AM](https://forum-static.gl-inet.com/original/2X/6/679037857685c186c73035ba0ddb7930064e4219.png)

If that doesn’t work for you, it’s been maybe 25 years since I have used this protocol, and might have too many cobwebs in the way to remember what to do. I would recommend replacing that old Ubiquiti gateway with something more modern if at all possible.

---

<div class="post-metadata">

**Author:** ![depechefan](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/7cd45c/32.png) [@depechefan](https://forum.gl-inet.com/u/depechefan)\
**Post date:** [February 25, 2024, 5:49pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/6 "2024-02-25T17:49:18Z")

</div>

I tried it. But I think that the issue is that I can’t specify a pre-shared key in the settings. At least I don’t seem to be able to connect… OK, I guess I need to find another way to reach my home network.

---

<div class="post-metadata">

**Author:** ![steep01](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a3d4f5/32.png) [@steep01](https://forum.gl-inet.com/u/steep01)\
**Post date:** [February 25, 2024, 6:09pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/7 "2024-02-25T18:09:11Z")

</div>

If you are using a PSK, then the protocol may be L2TP over IPSec? IF so this would be secure VPN even by today’s standards. Can you share a link to the documentation for your Ubiquiti gateway?

---

<div class="post-metadata">

**Author:** ![depechefan](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/d/7cd45c/32.png) [@depechefan](https://forum.gl-inet.com/u/depechefan)\
**Post date:** [February 25, 2024, 6:31pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/8 "2024-02-25T18:31:03Z")

</div>

> **[UniFi Gateway - L2TP VPN Server](https://help.ui.com/hc/en-us/articles/12594825307927-UniFi-Gateway-L2TP-VPN-Server)**
>
> L2TP is a traditional VPN server found in the Teleport & VPN section of your Network application that allows you to connect to the UniFi network from a remote location. A UniFi Gateway or UniFi...

This is not documentation per se. But it describes what I have done

Thanks  
/M

---

<div class="post-metadata">

**Author:** ![steep01](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a3d4f5/32.png) [@steep01](https://forum.gl-inet.com/u/steep01)\
**Post date:** [February 25, 2024, 7:02pm UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/9 "2024-02-25T19:02:29Z")

</div>

Thanks. This confirms that the VPN is L2TP/IPSec, which can still be a secure tunnel, depending on the ciphers supported on the server. To configure an openwrt client, you would need to install and configure strongswan packages. I am familiar with strongswan in general, but I have not done it in openwrt. I am guessing here but I think that you would need to first configure IPSec and then L2TP. Here is the openwrt documentation. This may not be all the information you need, but it would be a start if you decide to tackle the project.

[https://openwrt.org/docs/guide-user/services/vpn/strongswan/start](https://openwrt.org/docs/guide-user/services/vpn/strongswan/start)

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 29, 2025, 11:36am UTC](https://forum.gl-inet.com/t/l2tp-vpn-connection/39037/10 "2025-10-29T11:36:53Z")

</div>


