Skip to content

Instantly share code, notes, and snippets.

@hmedkouri

hmedkouri/l2tp-ipsec.md

Last active December 15, 2022 21:56
Show Gist options
  • Save hmedkouri/2f4aadf55c90630b74e80d4d43fee6e8 to your computer and use it in GitHub Desktop.
Save hmedkouri/2f4aadf55c90630b74e80d4d43fee6e8 to your computer and use it in GitHub Desktop.
Download ZIP
VPN: L2TP over IPSec on Linux Mint
Raw
l2tp-ipsec.md

  • Necessary libraries (all available in the standard distribution) - mark them for installation in Synaptic Package Manager Core packages that bring the necessary dependencies(start here) network-manager-l2tp-gnome (1.2.4-0ubuntu1xenial1) strongswan (5.3.5-1ubuntu3.1) strongswan-plugin-openssl (5.3.5-1ubuntu3.1) All packages (after selecting list 1, make sure you have all these "Marked for Installation") that need to be installed network-manager-l2tp (1.2.4-0ubuntu1xenial1) network-manager-l2tp-gnome (1.2.4-0ubuntu1~xenial1) strongswan (5.3.5-1ubuntu3.1) strongswan-libcharon (5.3.5-1ubuntu3.1) strongswan-plugin-openssl (5.3.5-1ubuntu3.1) strongswan-charon (5.3.5-1ubuntu3.1) strongswan-starter (5.3.5-1ubuntu3.1) libstrongswan (5.3.5-1ubuntu3.1) libstrongswan-standard-plugins (5.3.5-1ubuntu3.1) xl2tpd (1.3.6+dfsg-4)

  • Configure the Network Manager thru the applet (lower right corner of the desktop) Click on the applet and select "Network Connections" In the dialog box click Add and then select "Point-to-Point Tunneling Protocol (L2TP)" under the VPN item and click the "Create..." button A new VPN connection dialog will show up - enter the name of the connection as desired and the following in the "VPN" tab: Gateway: the IP or host name of the remote VPN router/gateway User name: your NT account user name Password: leave it to "Ask for this password every time" - this is the default option by clicking the icon at the right end of the field NT Domain: enter the NT active directory or domain name (for my case it was a simple name, not name.com e.g.) Click the "IPsec Settings..." button end enter the following in the new dialog box: Check the "Enable IPsec tunnel to L2TP host" Leave "Group Name" and "Gateway ID" blank Pre-shared key: enter the PSK Phase1 Algorithms : 3des-sha1-modp1024 Phase2 Algorithms : 3des-sha1 Click the "PPP Settings..." and enter the following in the new dialog box: In the "Allow the following authentication methods:" list uncheck all but PAP and MSCHAPv2 Check the "Use Point-to-Point encryption (MPPE)" box and leave "Allow stateful encryption" unchecked Leave "Allow BSD data compression" and "Allow Deflate data compression" checked Uncheck the next three "Use ..." check boxes Check the "Send PPP echo packets" box Set "MTU" and "MRU" to 1200

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment