OVERVIEW
Layer 2 Tunneling Protocol (L2TP) is a versatile tunneling protocol used to establish virtual private networks (VPNs). It is commonly employed to enable secure remote access to private networks over public networks like the Internet. L2TP encapsulates data within a tunnel, allowing for the safe passage of information. However, it is important to note that L2TP itself does not provide encryption, it relies on the underlying network to secure the data. Therefore, while L2TP effectively facilitates secure connections, it should be used in conjunction with other security measures to ensure the protection of transmitted data.
Grandstream GWN Routers and GCC Convergence devices support L2TP VPN configurations only in client mode. This means that these devices can connect to an L2TP VPN server, but cannot act as an L2TP VPN server themselves.
L2TP CLIENT CONFIGURATION
To configure an L2TP client, navigate to the VPN → L2TP page. To create a new L2TP VPN connection, click the Add button. To modify an existing connection, click the Edit icon next to the desired connection.
Refer to the figure and table below for detailed configuration descriptions.
Name | Set a name for this VPN tunnel. |
Status | Toggle ON/OFF the L2TP VPN connection. |
Interface | Select the WAN port to be used by VPN. |
Destination | Select the destinations from the drop-down list, the interfaces can be WAN, VLAN, VPN or All. Note: When selecting “All”, subsequent new interfaces will be automatically included. |
Server Address | Enter the VPN Server address |
Username | Enter VPN username that has been configured on the server side. |
Password | Enter VPN password that has been configured on the server side. |
IP Masquerading | Toggle ON/OFF IP Masquerading. IP Masquerading is a form of Network Address Translation (NAT) that allows internal devices on a private network to communicate with external networks using a single public IP address. It enables one device, typically a router, to act on behalf of multiple devices, making it appear as though the traffic originates from the router’s public IP address. |
Maximum Transmission Unit (MTU) | Set the MTU value. Note: the default value is 1430, do not modify it unless necessary. |
Remote Subnet | The Remote Subnet field specifies the subnet on the remote network that the L2TP client will access through the VPN. It directs traffic destined for the specified subnet through the VPN tunnel. Click on plus/minus icons to add or delete then enter the IP address and subnet mask. E.g. 192.168.1.0/24. |
L2TP Client Configuration
The Server address, Remote Subnet, Username, and Password depend on the VPN Server configuration.
SUPPORTED DEVICES
The following devices support the L2TP.
Model | Supported | Firmware |
GWN700x | Yes | 1.0.5.5 or newer |
GWN7062/GWN7052(F) | Yes | 1.0.7.2 or newer |
GCC601x | Yes | 1.0.5.11 or newer |
GCC602x | Yes | 1.0.7.5 or newer |