...
| Code Block | ||
|---|---|---|
| ||
[admin@MikroTik] > /interface l2tp-client \ add connect-to=192.168.51.3 disabled=no name=MT-User password=StrongPass user=MT-User [admin@MikroTik] > /interface l2tp-client print Flags: X - disabled, R - running 0 R name="MT-User" max-mtu=1450 max-mru=1450 mrru=disabled connect-to=192.168.51.3 user="MT-User" password="StrongPass" profile=default-encryption keepalive-timeout=60 use-ipsec=no ipsec-secret="" allow-fast-path=no add-default-route=no dial-on-demand=no allow=pap,chap,mschap1,mschap2 |
L2TP Ether
Overview
Layer 2 Tunnel Protocol Version 3 (L2TPv3) is a draft from the Internet Engineering Task Force (IETF) working group. It introduces various improvements to the original L2TP, allowing the encapsulation of Layer 2 (L2) payloads within L2TP. More precisely, L2TPv3 outlines the protocol for tunnelling Layer 2 payloads across an IP core network using L2 virtual private networks (VPNs).
Properties
| Property | Description |
|---|---|
| connect-to ( IP; Default: ) | Remote address of L2TP server. |
| comment ( string; Default: ) | Short description of the tunnel. |
| disabled ( yes | no; Default: yes) | Enables/disables tunnel. |
| mac-address ( string; Default: auto) | Set desired mac address of interface. |
| unmanaged-mode ( yes | no; Default: no) | Set unmanaged mode active, the configuration for additional settings will be possible, such as: peer-cookie, send-cookie, local-tunnel-id, local-session-id, remote-tunnel-id, remote-session-id, local-address. |
| local-tunnel-id ( string; Default: disabled) | Set value for local-tunnel-id, an integer required. |
| local-session-id ( string; Default: disabled) | Set value for local-session-id, an integer required. |
| remote-tunnel-id ( string; Default: disabled) | Set value for remote-tunnel-id, an integer required. |
| remote-session-id ( string; Default: disabled) | Set value for remote-session-id, an integer required. |
| peer-cookie ( string; Default: disabled) | Sets optional peer cookie. To enable cookie enter remote cookie value (8 or 16 character hex string value expected) to disable leave empty. |
| send-cookie ( string; Default: disabled) | Sets optional cookie. To enable cookie enter remote cookie value (8 or 16 character hex string value expected) to disable leave empty. |
| mtu (auto; Default: 1420) | Maximum Transmission Unit. Max packet size that L2TP interface will be able to send without packet fragmentation. |
| name (string; Default: ) | Descriptive name of the interface. |
| local-address (IP address; Default: ) | Set local address for unmanaged mode. |
| use-ipsec (yes | no; Default: no) | When this option is enabled, dynamic IPSec peer configuration and policy is added to encapsulate L2TP connection into IPSec tunnel. |
| allow-fast-path (yes | no; Default: no ) | Allow to forward packets without additional processing in the Linux kernel. |
| l2tp-proto-version ( l2tpv3-ip | l2tpv3-udp | ; Default: l2tpv3-udp ) | Specify protocol version. |
| cookie-length ( 0 | 4-bytes | 8-bytes ; Default: 0 ) | Configures an L2TPv3 pseudowire static session cookie. |
| digest-hash (md5 | none | sha1 ; Default: md5 ) | Specifies which hash function to be used. |
| use-l2-specific-sublayer ( yes | no; Default: no) | Specify source address. |
| circuit-id | Set the virtual circuit identifier to bind the one end of the L2TPv3 control channel. |
| ipsec-secret (string; Default: ) | Preshared key used when use-ipsec is enabled. |