Hi,
Is the official documentation for setting up a L2TP VPN server still accurate?
https://help.ubnt.com/hc/en-us/articles/204950294-EdgeMAX-L2TP-Server
https://help.ubnt.com/hc/en-us/articles/204959404-EdgeMAX-Set-up-L2TP-over-IPsec-VPN-server
For example, based on the above, you might end up with a configuration like this (this is for a dual-WAN setup):
ipsec { ipsec-interfaces { interface eth0 interface eth1 } nat-networks { allowed-network 0.0.0.0/0 { } } nat-traversal enable } l2tp { remote-access { authentication { local-users { username SANITISED { password SANITISED } } mode local } client-ip-pool { start 192.168.2.20 stop 192.168.2.30 } dns-servers { server-1 8.8.8.8 server-2 8.8.4.4 } ipsec-settings { authentication { mode pre-shared-secret pre-shared-secret SANITISED } } mtu 1492 outside-address 0.0.0.0 } }
However,
ipsec-interfaces Interface to use for VPN (DEPRECATED) nat-networks Network Address Translation (NAT) networks (DEPRECATED) nat-traversal Network Address Translation (NAT) traversal (DEPRECATED)
Yet they're still mentioned at https://help.ubnt.com/hc/en-us/articles/204950294-EdgeMAX-L2TP-Server and https://help.ubnt.com/hc/en-us/articles/204959404-EdgeMAX-Set-up-L2TP-over-IPsec-VPN-server
Also, he also mentioned this setting:
auto-firewall-nat-exclude disable
but that's not covered in the documentation at all - is it possible to provide some help on this, so we know what it's for, or whether we need to use it?
Would be great if we could just get a sample of what the current L2TP VPN configuration should be (since there's no VPN wizard yet - although if we could just get one of those, that might be pretty awesome...haha).