Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

OpenL2TP: Difference between revisions

101 bytes added ,  18 August 2018
clean up
(Created page with "==Setting up OpenL2TP== This page documents my experiments setting up an LNS for my RevMobile data SIMs, also see How to set up L2TP on a FireBrick....")
 
(clean up)
 
(4 intermediate revisions by one other user not shown)
__NOTOC__<indicator name="L2TP">[[File:Menu-L2TP-Relay.svg|link=:Category:L2TP Handover|30px|Back up to the L2TP Handover page]]</indicator>
==Setting up OpenL2TP==
 
This page documents my experiments setting up an LNS for my RevMobileA&A data SIMs, also see [[FireBrick L2TP Server|How to set up L2TP on a FireBrick]].
 
For the LNS, I used [http://www.openl2tp.org/ OpenL2TP] running on Linux ([http://www.debian.org/ Debian] 'squeeze'). I did some experiments with xl2tpd as well.
The OpenL2TP [http://www.openl2tp.org/downloads download page] offers version 1.8, which compiles straight out of the tarball.
 
This is the configuration I'm using -- withusing—with my IP addresses and tunnel secret removed, naturally! If you don't want tunnel authentication, leave out the 'secret=' and 'auth_mode=' lines.
 
peer profile create profile_name=a.gormless
===Musings===
 
PPP over GPRS connections is a bit, well, weird. The PPP connection that pppd on your laptop establishes is not all the way through to your LNS as you might expect. It isn't even terminated in the mobile network -- itnetwork—it's actually terminated on the modem. What this means is that the username and password you give to pppd are verified by the modem -- whichmodem—which just accepts anything you supply.
 
The proxy authentication username that the LAC presents is a UK 07xxx phone number. It also presents a CHAP authentication ID, challenge and response. These are ignored unless you enable allow_ppp_proxy.
The 'calling number' and 'called number' in the incoming call request are the SIM's ICCID.
 
[[Mobile_IPv6Mobile IPv6|IPv6]]
 
===Things to do===
 
Work out how to identify individual SIMs and supply the correct IP address to each one. If you set 'auth_none' to 'no' in the ppp profile then PPP forces the other end to authenticate -- thisauthenticate—this is separate from the PPP proxy authentication although it uses the same username and secret. The username is currently a telephone number (447...) so I think I can use that.
 
I've got this working, in as much as it allows entries in the LNS's chap-secrets to contain IP addresses and the correct one is passed to the modem. However (at least on pppd 2.4.5 with openl2tp 1.8) I haven't found a way to set the IP address on the LNS's end of the link. If you use the '-- local:remote' syntax in chap-secrets it picks up the remote IP but not the local one.
 
 
[[Category:DataL2TP SIMsHandover]]
[[Category:Mobile L2TP Handover]]
editor
699

edits