Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 39 subscribers
  • Views 4082 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to setup working VPN IPSec/L2TP tunnel from Ubuntu

Konrad Bechler

Hello Community,

I'm trying to setup a VPN connection between XG125w (SFOS 18.0.4 MR-4) and Ubuntu 20.04 box. With no luck. Current configuration works fine on Windows 10 system.

For testing, I've created a fresh Ubuntu installation (the only thing I've done was sudo apt-get update && sudo apt-get install network-manager-l2tpl network-manager-l2tp-gnome).

After connection VPN I have unusual entry in my routing table:

$ ip r
default dev ppp0 proto static scope link metric 50
default via 10.0.2.2 dev enp0s3 proto dhcp metric 100
10.0.2.0/24 dev enp0s3 proto kernel scope link src 10.0.2.15 metric 100
10.0.2.2 dev enp0s3 proto static scope link metric 100
89.x.y.z dev ppp0 proto kernel scope link src 172.21.7.100 metric 50
89.x.y.z via 10.0.2.2 dev enp0s3 proto static metric 100
169.254.0.0/16 dev enp0s3 scope link metric 1000

Everything works fine, when I remove this entry:

sudo ip r d 89.x.y.z dev ppp0

I'm lost a bit. It looks like my XG pushed wrong local IP:

$ tail -f /var/log/syslog | grep -i ppp
[...]
vpn-connection[:(ppp0)]: Data: VPN Gateway: 89.x.y.z
vpn-connection[:(ppp0)]: Data: Tunnel Device: "ppp0"
vpn-connection[:(ppp0)]: Data: IPv4 configuration:
vpn-connection[:(ppp0)]: Data:   Internal Address: 172.21.7.100
vpn-connection[:(ppp0)]: Data:   Internal Prefix: 32
vpn-connection[:(ppp0)]: Data:   Internal Point-to-Point Address: 89.x.y.z
vpn-connection[:(ppp0)]: Data:   Static Route: 0.0.0.0/0   Next Hop: 0.0.0.0
vpn-connection[:(ppp0)]: Data:   Static Route: 89.x.y.z/32   Next Hop: 0.0.0.0
vpn-connection[:(ppp0)]: Data:   Internal DNS: 8.8.8.8
vpn-connection[:(ppp0)]: Data:   Internal DNS: 8.8.4.4
vpn-connection[:(ppp0)]: Data:   DNS Domain: '(none)'
vpn-connection[:(ppp0)]: Data: No IPv6 configuration
vpn-connection[:(ppp0)]: VPN plugin: state changed: started (4)
vpn-connection[:(ppp0)]: VPN connection: (IP Config Get) complete

Maybe someone in the community hit this problem an has some advice?

Regards,

Konrad



This thread was automatically locked due to age.
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to Sophos Community.

    I tried to connect L2TP to lab device from Ubuntu machine and it's working fine.

    I've followed the below steps.

    ==> To install L2TP module on Ubuntu.

    sudo add-apt-repository ppa:nm-l2tp/network-manager-l2tp
    sudo apt-get update
    sudo apt-get install network-manager-l2tp-gnome

    ==> After installation, you'll get the L2TP option in VPN configuration on Ubuntu.

    ==> I've added few snapshots for reference.

  • 0 in reply to FormerMember

    Thank you for your answear.

    I've found the problem.

    It looks like "sudo add-apt-repository ppa:nm-l2tp/network-manager-l2tp" is very important here, as it changes the version of NetworkManager to install.


    NetworkManager 1.2.16-1 (from default Ubuntu repository) doesn't work (adds this strange route entry)
    NetworkManager 1.8.6-1~ubuntu20.04.1~ppa1 (from external PPA) works fine.

    Regards,

    Konrad

Unfiltered HTML