Tag: l2tp

  • Android OS with SonicWALL L2TP server

    Android OS with SonicWALL L2TP server

    The main thing about the droid is that is uses xauth, DES for phase 2 of the IPsec negotiation, and L2TP has to be configured on the Sonicwall.

    On the Droid the settings are pretty basic.

    In the Droid go to settings > Wireless & Networks > VPN settings

    Add VPN > add L2TP/IPsec PSK VPN

    VPN name: office

    VPN server: vpn.office.com or IP address

    IPsec pre-shared key: enter the shared secret off the general tab of the WAN GroupVPN

    Make sure the L2TP secret is disabled

    The DNS search domains is optional .

    Sonicwall configuration:

    On the Sonicwall go to VPN > settings and edit the WAN GroupVPN. On the General Tab make up a pre-shared key.

    On the proposal tab change the encryption for phase 2 to DES. You can leave the lifetime at defaults.

    On the Advanced tab, enable XAuth and set the user group to Trusted users.

    On the Client tab, allow connects to: all secured gateways, and enable set default route as this gateway.

    Now under VPN > L2TP server, configure a L2TP IP pool that is on a different subnet that your LAN. L2TP has to route.

    Go to Users > Local Users. Add a new user, goto the VPN access tab and give the user access to firewall subnets, L2TP pool and WAN Remote Access Networks.

    Make sure you reconfigure a default outbound NAT policy to nat the L2TP clients out. This can be done just by changing the inbound interface to any. Some versions of firmware will make a L2TP outbound NAT policy for you.

    If you run into any issue don’t forget to check the logs on the sonicwall.

    Sorry i don’t have any pretty pictures for you to follow. If you have any issues please don’t contact me. I will not answer.