Link to home
Start Free TrialLog in
Avatar of sglee
sglee

asked on

Setting up L2TP IPSec VPN on Windows 2008 R2 Server

User generated imageUser generated imageUser generated imageUser generated imageUser generated imageUser generated imageUser generated image
Hi,
 
 I set up RRAS on my Windows 2008 R2 Server and tried to connect to the VPN server using L2TP IPSec method, but I get an error. So far this is what I have done on Windows 2008 R2 Server.
(1) Added RRAS role.
(2) made sure that WAN Miniport (L2TP) is listed in Ports section of RRAS.
(3) Created preshared key
(4) Added port number 500 and 4500 UDP in Advanced Settings in Firewall
(5) Made sure that RRAS check box was checked in Allowed Programs in Firewall.
(6) In my CISCO router, I am forwarding two UDP  ports 500 and 4500 to this computer running Windows 2008 R2.
(7) In my Windows 10 PC, I created a L2TP VPN connection and entered preshared key.
But when I tried to connect, I get an error.
Can you help?
Avatar of Mal Osborne
Mal Osborne
Flag of Australia image

Pretty sure you will need UDP 1701 as well.
Avatar of sglee
sglee

ASKER

User generated imageI added port number 1701 in Windows Firewall Inbound and added a port forwarding statement in my CISCO router.
ip nat inside source static udp 192.168.1.31 500 xx.233.237.xxx 500 extendable
ip nat inside source static udp 192.168.1.31 1701 xx.233.237.xxx 1701 extendable
ip nat inside source static udp 192.168.1.31 4500 xx.233.237.xxx 4500 extendable

But I still get the same error message on my Windows 10 PC when I tried to connect.
Do you need L2TP?
Avatar of sglee

ASKER

I need to implement one of three types of VPN using Windows RRAS - IKEv2, IPSec, or L2TP whichever is easier.
l2tp is not encrypted.
Avatar of sglee

ASKER

is L2TP/IPSec encrypted?
This is what I was trying to follow originally before posting my question on this board:
http://serverfault.com/questions/710454/how-to-setup-l2tp-ipsec-vpn-server-on-windows-server-2008-r2
Remove that slash.
IPSec - encrypted L2TP -not.
Avatar of sglee

ASKER

I do not understand your point.
ASKER CERTIFIED SOLUTION
Avatar of sglee
sglee

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of sglee

ASKER

i am not getting the help that I need. Therefore I like to close this question.