Project

General

Profile

Actions

Todo #15816

closed

Feedback on pfSense® software Configuration Recipes — L2TP/IPsec Remote Access VPN Configuration Example

Added by Artist Gusev 7 months ago. Updated 7 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
L2TP
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:

Description

Page: https://docs.netgate.com/pfsense/en/latest/recipes/l2tp-ipsec.html

Feedback:

create L2TP for Windows 10(https://learn.microsoft.com/en-us/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=windowsserver2022-ps)
PowerShell
Add-VpnConnection -Name "Test" -ServerAddress 176.16.1.2 -TunnelType "L2tp"
Set-VpnConnectionIPsecConfiguration -ConnectionName "Test" -AuthenticationTransformConstants None -CipherTransformConstants AES128 -EncryptionMethod AES128 -IntegrityCheckMethod SHA256 -PfsGroup None -DHGroup 2 -PassThru -Force

regedit HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasman\Parameters create dword32 -ProhibitIpSec = 1
reboot system.

Actions #1

Updated by Jim Pingle 7 months ago

  • Status changed from New to Rejected

Those settings would break it worse than it already is by prohibiting L2TP from using IPsec, so it wouldn't be encrypted.

We won't be adding any more information on L2TP/IPsec at this time. There are many more capable VPN types which are not prone to its problems.

Actions

Also available in: Atom PDF