MikroTik hAP ac² 討論貼

Rank: 2 Rank: 2

391^# 跳轉到 »

發表於 2018-4-2 15:53 | 只看該作者

既然簡單，不如師兄你教下我。
jycw 發表於 2018-4-2 15:06

terminal:

/ip pool add name="L2TP-Pool" ranges=192.168.89.1-192.168.89.20

/ppp profile add name=l2tp-profile local-address=L2TP-Pool remote-address=L2TP-Pool use-encryption=required change-tcp-mss=yes dns-server=8.8.8.8

/interface l2tp-server server set authentication=mschap2 default-profile=l2tp-profile enabled=yes ipsec-secret=MYKEY max-mru=1460 max-mtu=1460 use-ipsec=yes

/ppp secret add name=MYUSER password=MYPASSWORD service=l2tp profile=l2tp-profile

/ip ipsec proposal add name=L2TP-Proposal auth-algorithms=sha1 enc-algorithms=3des,aes-256-cbc pfs-group=none

/ip ipsec peer add address=0.0.0.0/0 port=500 auth-method=pre-shared-key secret=MYKEY generate-policy=port-override exchange-mode=main-l2tp
send-initial-contact=yes nat-traversal=yes hash-algorithm=sha1 enc-algorithm=3des,aes-256 dh-group=modp1024

/ip ipsec policy add src-address=::/0 dst-address=::/0 protocol=all template=yes group=default action=encrypt level=require ipsec-protocols=esp tunnel=no sa-src-
address=0.0.0.0 sa-dst-address=0.0.0.0 proposal=L2TP-Proposal

TOP

张无忌

進階會員

Rank: 3 Rank: 3 Rank: 3

392^#

發表於 2018-4-2 16:19 | 只看該作者

回覆 387# jycw

IPhone，你要用L2TP over IPSec (L2TP/IPSec)。

TOP

mccafe

中級會員

Rank: 2 Rank: 2

393^#

發表於 2018-4-2 16:57 | 只看該作者

回覆 390# jycw

唔使貓仔兄出手！
如果我冇記錯6.x後整合了ipsec到l2tp server設定裡,無需再到/ip ipsec peer設置ipsec

還有記得開啟對應的防火牆，L2TP是udp port 1701/500/4500。

/ip firewall filter

add action=accept chain=input comment="Accept L2TP VPN" dst-port=1701,500,4500 in-interface=xxxx protocol=udp

TOP

张无忌