L2TP Ipsec - several connections from/to same IP addres

RouterOS General
1

Hi all,

I have established an L2TP server using an RB750GL, with Windows users connecting from their locations, and they are successfully added to the LAN bridge, enabling them to access LAN resources. Users have separate secrets, but use same PPP profile.
Server IP is resolved from a changeip.net domain. Only one public IP on server.

This works fine when users are scattered around with different public IPs, but now I need several users to connect while sitting behind the same NAT router, i.e. the originating address exposed is the same.
When one of them connect to the server, the guy already connected is thrown out and so on…

IPSec peer property “NAT traversal” is checked, but that’s maybe related to the server side?

So how can I maintain several connections with same IP in both ends?

2

Nobody?

3

Ok…they say that talking to yourself is the first sign of…something… :wink:

Anyway, trying to find a workaround for this, some ideas came across my mind:

  1. Order more public IPs on the client side and establish 1:1 NAT for the users in question
  2. Order more public IPs on the server side and let each client connect to different IP
  3. Bridge DSL modem and install MT router behind as NAT router, then set up VPN tunnel between it and VPN server.

So what do you think guys?

4

There can be only one ipsec client behind one nated ip address.

Best way would be to give each client public IP, but that is not always possible.

If you know client’s router IP you can make static ipsec tunnel and just allow to set up l2tp or other vpn tunnel over that ipsec tunnel.