Blog

Setup L2TP over IPsec VPN client on Ubuntu 18.04 using GNOME and Synology

lunux
2 Min Read
0

Install network-manager-l2tp

sudo apt-get update
sudo apt-get install network-manager-l2tp
sudo apt-get install network-manager-l2tp-gnome

Set VPN properties via GUI

Navigate to Settings > Network > VPN > +

Select Layer 2 Tunneling protocol (L2TP)

Enter:
VPN Name, Gateway (domain name or IP),
User name,
NT Domain (in my case this is Active Directory domain name)

Choose IPsec settings,
check Enable IPsec tunnel to L2TP host,
enter your pre-shared key,
enter 3des-sha1-modp1024 as Phase1 Algorithms,
enter 3des-sha1 as Phase2 Algorithms

(or better setings on bottom of this page)

Set PPP options according to your VPN server configuration. Mine looks like this:

Last thing is to make sure your local network is L2TP pass-through and IPsec pass-through and thats it, ready to go!

Source:

Setup L2TP over IPsec VPN client on Ubuntu 18.04 using GNOME

I received this error with StrongSwan 5.6.1 in Centos 7 while connecting to a Windows server. The error is due to the remote server using weak ciphers that are considered deprecated by StrongSwan.

  • Enabling the following weak ciphers allows the ipsec connection to complete:
    • Phase1 Algorithms : aes128-sha1-modp2048,3des-sha1-modp1536,3des-sha1-modp1024
    • Phase2 Algorithms : aes128-sha1,3des-sha1

enter image description here

see the known issues for network-manager-l2tp

Source:
https://serverfault.com/questions/344768/strongswan-ipsec-ubuntu-ignoring-informational-payload-type-no-proposal-chosen/901183#901183