Quantcast
Viewing all articles
Browse latest Browse all 60861

vpn first time l2tp/ipsec

Well config posted below, cleaned a little bit. With the config below i cant connect at all. would really appreciate any pointers.

vpn {
    ipsec {
        auto-firewall-nat-exclude disable
        ipsec-interfaces {
            interface eth0
        }
        nat-networks {
            allowed-network 129.168.1.0/24 {
            }
        }
        nat-traversal enable
    }
    l2tp {
        remote-access {
            authentication {
                local-users {
                    username ******* {
                        password *********
                    }
                }
                mode local
            }
            client-ip-pool {
                start 192.168.1.200
                stop 192.168.1.205
            }
            dhcp-interface eth0
            ipsec-settings {
                authentication {
                    mode pre-shared-secret
                    pre-shared-secret ***********
                }
                ike-lifetime 3600
            }
        }
    }
}

dhcp-server {
        disabled false
        hostfile-update disable
        shared-network-name LAN {
            authoritative enable
            subnet 192.168.1.0/24 {
                default-router 192.168.1.1
                dns-server 192.168.1.1
                lease 86400
                start 192.168.1.101 {
                    stop 192.168.1.199
                }
                
                bunch of ip reservations.......
                
                
firewall {
    all-ping enable
    broadcast-ping disable
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians enable
   
    name WAN_LOCAL {
        default-action drop
        description "WAN to router"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop
            description "Drop invalid state"
            state {
                invalid enable
            }
        }
        rule 21 {
            action accept
            description ike
            destination {
                port 500
            }
            log disable
            protocol udp
            state {
                established enable
                invalid disable
                new enable
                related enable
            }
        }
        rule 22 {
            action accept
            description l2tp
            destination {
                port 1701
            }
            log disable
            protocol udp
            state {
                established enable
                invalid disable
                new enable
                related enable
            }
        }
        rule 23 {
            action accept
            description esp
            log disable
            protocol 50
        }
        rule 24 {
            action accept
            description nat-t
            destination {
                port 4500
            }
            log disable
            protocol udp
            state {
                established enable
                invalid disable
                new enable
                related enable
            }
        }
    }
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
}
interfaces {
    ethernet eth0 {
        address dhcp
        description Internet
        duplex auto
        firewall {
            in {
                name WAN_IN
            }
            local {
                name WAN_LOCAL
            }
            out {
                name Wan_Out
            }
        }
        speed auto
    }

Viewing all articles
Browse latest Browse all 60861

Trending Articles