View source for FireBrick using L2TP as main connection

[[File:2700-small.png|link=:Category:FireBrick]]

=Overview=
It is possible to have slow ADSL (if you're a long way from the exchange) but to have a faster (fibre) link to use.
In this case, you might want to keep an ADSL or two around for backups in case the fibre goes down.
If the fibre is provided by a third party, you could use [[L2TP]] over your main connection to avoid IPs changing if the fibre breaks.

All this config is doing is setting localprefs on ADSL and [[L2TP]] such that the [[L2TP]] is preferred if it's up. The ADSL lines are bonded if the [[L2TP]] goes down.

This is a rough example for such a config, using NAT on the LAN and [[L2TP]] to AA as the main connection:

<pre>
 <port name="LAN"
       ports="1"/>
 <port name="WAN1"
       ports="4"
       comment="ADSL Line 1"/>
 <port name="WAN2"
       ports="3"
       comment="ADSL Line 2"/>
 <port name="WAN3"
       ports="2"
       comment="Main internet connection"/>
 <interface name="LAN"
            port="LAN"
            comment="Default LAN interface">
  <subnet name="IPv4"
          ip="192.168.0.1/24"
          comment="LAN"/>
  <subnet name="[[IPv6]]"
          ip="2001:db8::1/64"
          ra="true"/>
 </interface>
 <interface name="WAN1"
            port="WAN1"
            comment="WAN interface 1"/>
 <interface name="WAN2"
            port="WAN2"
            comment="WAN interface 2"/>
 <interface name="Main"
            port="WAN3"
            table="1"
            comment="Main connection interface">
  <subnet comment="Gets IP from DHCP"/>
 </interface>
 <ppp name="ADSL1"
      port="WAN1"
      username="example@a.1"
      password="secret"
      speed="1000000"
      lcp-rate="1"
      lcp-timeout="6"
      localpref="100"
      table="0"
      graph="ADSL1"/>
 <ppp name="ADSL2"
      port="WAN2"
      username="example@a.2"
      password="secret"
      speed="1000000"
      lcp-rate="1"
      lcp-timeout="6"
      localpref="100"
      table="0"
      graph="ADSL2"/>
 <usb>
 <loopback ip="192.0.2.10"
           comment="Public IP address for NAT"/>
 <l2tp>
  <outgoing name="AAISP"
            hostname="example@a.3"
            secret="secret"
            ip="90.155.53.19"
            table="1"
            payload-table="0"
            username="example@a.3"
            password="secret"
            localpref="1000"
            mtu="1280"
            lcp-rate="1"
            lcp-timeout="10"
            tcp-mss-fix="true"/>
 </l2tp>
 <ip-group name="RFC1918"
           ip="10.0.0.0/8 172.16.0.0/12 192.168.0.0/16"
           comment="This IP group is used for NAT"/>
 <rule-set name="NAT"
           table="0"
           source-ip="RFC1918"
           no-match-action="continue"
           comment="Sets source IP address for NAT to a routed address.">
  <rule name="self"
        target-interface="self"
        comment="Allow traffic from the LAN to reach the FireBrick"/>
  <rule name="NAT"
        set-source-ip="192.0.2.10"
        set-nat="true"/>
 </rule-set>
</pre>


[[Category:FireBrick Tunnels|l2tp]]