Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

OpenL2TP: Difference between revisions

4 bytes removed ,  18 August 2018
clean up
(clean up)
 
__NOTOC__<indicator name="L2TP">[[File:Menu-L2TP-Relay.svg|link=:Category:L2TP_HandoverL2TP Handover|30px|Back up to the L2TP Handover page]]</indicator>
==Setting up OpenL2TP==
 
The OpenL2TP [http://www.openl2tp.org/downloads download page] offers version 1.8, which compiles straight out of the tarball.
 
This is the configuration I'm using -- withusing—with my IP addresses and tunnel secret removed, naturally! If you don't want tunnel authentication, leave out the 'secret=' and 'auth_mode=' lines.
 
peer profile create profile_name=a.gormless
===Musings===
 
PPP over GPRS connections is a bit, well, weird. The PPP connection that pppd on your laptop establishes is not all the way through to your LNS as you might expect. It isn't even terminated in the mobile network -- itnetwork—it's actually terminated on the modem. What this means is that the username and password you give to pppd are verified by the modem -- whichmodem—which just accepts anything you supply.
 
The proxy authentication username that the LAC presents is a UK 07xxx phone number. It also presents a CHAP authentication ID, challenge and response. These are ignored unless you enable allow_ppp_proxy.
The 'calling number' and 'called number' in the incoming call request are the SIM's ICCID.
 
[[Mobile_IPv6Mobile IPv6|IPv6]]
 
===Things to do===
 
Work out how to identify individual SIMs and supply the correct IP address to each one. If you set 'auth_none' to 'no' in the ppp profile then PPP forces the other end to authenticate -- thisauthenticate—this is separate from the PPP proxy authentication although it uses the same username and secret. The username is currently a telephone number (447...) so I think I can use that.
 
I've got this working, in as much as it allows entries in the LNS's chap-secrets to contain IP addresses and the correct one is passed to the modem. However (at least on pppd 2.4.5 with openl2tp 1.8) I haven't found a way to set the IP address on the LNS's end of the link. If you use the '-- local:remote' syntax in chap-secrets it picks up the remote IP but not the local one.
editor
698

edits