Topic: SME SoftEther L2TP VPN

[guest22]

FYI: https://wiki.contribs.org/SoftEther_VPN#Radius_authentication

[ReetP]

Note that if you want/need L2TP,  I have built a L2TP Ipsec contrib for testing:

https://wiki.contribs.org/Smeserver-libreswan-xl2tpd
https://forums.contribs.org/index.php/topic,53021.0/all.html

The main benefit over SoftEther is on most mobiles you do not need additional client software to configure or connect to it - just a few simple commands at the server console and a couple of settings in most mobile phones and it can be running in minutes. It also uses local user authentication.

[guest22]

No flaming intended here but Softether VPN support virtually all clients platforms natively.


https://www.softether.org/1-features


I have tested Android with the build in VPN client and OS X with the native VPN client. Works like a charm.

[ReetP]

No flaming intended here but Softether VPN support virtually all clients platforms natively.

I have tested Android with the build in VPN client and OS X with the native VPN client. Works like a charm.

Cool ! I thought you needed (or used to need) a client.

[Mophilly]

The wiki page for this contribution needs "uninstall" instructions.

More to the point, I need uninstall instructions so I can back it out. The configuration is a bit above our skill set at this point.

[ReetP]

I can do you uninstall but its pretty well:

yum remove smeserver-libreswan*
signal-event post-upgrade;signal-event reboot

I can't see it is any worse than softether ?

Essentially...
Install
Create a L2TPD/IPsec connection (I could automate some of this) with your ipsec password and your L2TPD Dhcp range and make sure it is outside the normal server range
Enable the services (for security I set them disabled by default)
Set a user in the server manager for VPN Access
Post-upgrade/reboot

On your phone add a connection
Set the server IP
Set the username
Set the password

Connect.....

I can't make it much simpler on the CLI

Theoretically it should be trivial to panelise this byt it us beyond me

[ReetP]

PS if tell me some of your server config I can tell you the settings to use

Mainly need the internal IP adress, subnet & dhcp range

config show dhcpd