Community discussions

MikroTik App
 
bokili
Member Candidate
Member Candidate
Topic Author
Posts: 135
Joined: Wed Aug 16, 2006 8:52 pm

Problem: Mikrotik and L2TP Tunnel Authentication

Wed Mar 07, 2007 8:55 pm

It seems that mikrotik doesn't support this right now. As we are unable to setup mikrotik as LNS because we have just one problem: That is how to setup l2tp tunnel authentication.

http://www.cisco.com/en/US/products/ps6 ... #wp1025043

We want to know if mikrotik plan to support this feature ?
 
bluestar
newbie
Posts: 31
Joined: Fri May 06, 2005 1:21 am

L2tp Tunel authentification

Wed Mar 07, 2007 11:00 pm

As You , we are very interested for implementing that feature on Mikrotik too.
 
bokili
Member Candidate
Member Candidate
Topic Author
Posts: 135
Joined: Wed Aug 16, 2006 8:52 pm

Thu Mar 08, 2007 12:24 am

If somebody from mikrotik can discuss this implementation, it will be excellent.

Somebody ?
 
changeip
Forum Guru
Forum Guru
Posts: 3819
Joined: Fri May 28, 2004 5:22 pm

Thu Mar 08, 2007 2:53 am

you simply want to use radius for l2tp-server authentication - so you dont have to use ppp secrets? Maybe I am missing something.
 
bokili
Member Candidate
Member Candidate
Topic Author
Posts: 135
Joined: Wed Aug 16, 2006 8:52 pm

Thu Mar 08, 2007 3:10 am

Yes, you are...

VPDN Cisco tehnology need that you have L2TP Tunnel Authentication on your LNS. So if you have mikrotik as router and LNS and at the other side you have CISCO (unfortunately in my case other side is CISCO) this is impossible to set as mikrotik doesn't support it.

More info you can find here about this: http://www.cisco.com/warp/public/cc/pd/ ... pro_tc.htm
 
bokili
Member Candidate
Member Candidate
Topic Author
Posts: 135
Joined: Wed Aug 16, 2006 8:52 pm

Fri Mar 09, 2007 7:38 pm

Somebody to discuss ?
 
smirre
just joined
Posts: 7
Joined: Thu Feb 16, 2006 3:12 pm

Tue Mar 13, 2007 5:23 pm

we´re experimenting with this issue at this time.
in our experiments we´re half-successfull with "no l2tp tunnel authentication" on a LNS in the middle.

but it seems that mikrotik only supports 1 ppp session per l2tp tunnel :(
 
bokili
Member Candidate
Member Candidate
Topic Author
Posts: 135
Joined: Wed Aug 16, 2006 8:52 pm

Fri Mar 16, 2007 7:52 am

Yes, mikrotik doesn't see different id tunnel connections. So, if you have one vpdn connection from one LAC, and receive another from the same LAC (with different tunnel id or with the same tunnel id), mikrotik disconects previous connection. So, this is main trouble if you shut down l2tp tunnel authentication on LAC.

If you have Cisco router, you can have as many as you want connections from the same LAC. That connections also can have the same tunnel id and works without a problem.

It will be excellent if Mikrotik can use this tehnology in next routerOS releases:

1. To make l2tp tunnel authentication possible.
2. To make possible multiple (without limit) l2tp connections from the same LAC
3. Include multilink possible with l2tp connections from LAC (so you can use ISDN 2 channels without a problem)

Who is online

Users browsing this forum: BartoszP, Guntis, mkx, shmichael, sindy and 56 guests