Votre partenaire de solution réseaux fiables -

+33175432870
info@draytek.fr
12 rue des Chauffours
95000 Cery

Google map

L2TP over IPsec depuis Windows 10 vers un routeur Vigor
>
>
L2TP over IPsec depuis Windows 10 vers un routeur Vigor

Article sections

    Ce document explique la méthode de configuration d’un routeur Vigor en tant que serveur L2TP over IPsec ainsi que la fonction VPN intégrée à Windows 10 permettant d’établir une liaison VPN avec le routeur Vigor et l’accès au réseau LAN.

    • DrayOS
    • Linux

    1. Make sure the router is connected to the Internet. Keep in mind the router’s WAN IP or domain name.

    2. Go to VPN and Remote Access >> Remote Access Control Setup to make sure “Enable IPsec VPN Service” and “Enable L2TP VPN Service” are checked.

     3. Create a remote dial-in user profile: Go to VPN and Remote Access >> Remote Dial-in User, click on an available index to edit the profile.


    4. Edit the profile as follows:

    • Check Enable this profile
    • For Allowed Dial-In Type, check L2TP and set IPsec Policy to “Must”
    • Give it a username and password
    • Click OK to save.


    5. Go to VPN and Remote Access >> IPsec General Setup, enter a Pre-Shared key and confirm it again. Then click OK to save.


    Now, the router is ready for remote dial-in clients. Network Administrator may check the online users from VPN and Remote Access >> Connection Management page.

    Establishing VPN from Windows 10

    1. On Windows PC, go to Settings >> Network & Internet >> VPN, click Add a VPN Connection.

    2. Enter the router’s WAN IP or domain name in Server name or address, select VPN type as “L2TP/IPsec with pre-shared key”, and enter the Pre-shared key we set in router’IPsec General Setup.

    3. To establish the VPN, click on the VPN connection, and click Connect.

    4. It will pop up a sign-in window, enter the username and password set in router’s VPN user profile.

    5. If the credentials are correct, VPN will be connected.

    Note: It’s recommended to change default IPsec Key Exchange algorithms for higher security.

    It can be configured in Windows firewall with advanced security –> (right panel) Properties –> IPsec Settings –> Customize IPsec defaults –> Key Exchange (advanced)

    Trouble-Shooting

    If VPN cannot establish, you may enable more protocols for authentication for a try. Go to Control Panel > Network and Internet > Network Connections, right-click on the connection of VPN to Vigor, and Properties. In Security Tab, enable both “PAP” and “CHAP” for Authentication, then click OK to apply.

    1. Navigate to User Management >> User Profile, click Add to add a new profile, and configure as followings:

    • Check Enable
    • Type Username and Password
    • Select “Enable” for L2TP Dial-In
    • Then click Apply to save the User profile.

     2. Go to VPN >>Remote Access Control and check Enable L2TP VPN Service

     3. Go to VPN >> IPsec General Setup and enter Preshared Key.

     

    Establishing VPN from Windows 10

    1. On Windows PC, go to Settings >> Network & Internet >> VPN, click Add a VPN Connection.

    2. Enter the router’s WAN IP or domain name in Server name or address, select VPN type as “L2TP/IPsec with pre-shared key”, and enter the Pre-shared key we set in router’IPsec General Setup.

    3. To establish the VPN, click on the VPN connection, and click Connect.

    4. It will pop up a sign-in window, enter the username and password set in router’s VPN user profile.

    5. If the credentials are correct, VPN will be connected.

    Note: It’s recommended to change default IPsec Key Exchange algorithms for higher security.

    It can be configured in Windows firewall with advanced security –> (right panel) Properties –> IPsec Settings –> Customize IPsec defaults –> Key Exchange (advanced)

    Trouble-Shooting

    If VPN cannot establish, you may enable more protocols for authentication for a try. Go to Control Panel > Network and Internet > Network Connections, right-click on the connection of VPN to Vigor, and Properties. In Security Tab, enable both “PAP” and “CHAP” for Authentication, then click OK to apply.

    Start typing and press Enter to search

    Shopping Cart

    Votre panier est vide.