L2TP VPN works for one user, another user doesn't

pista · July 2018

Hi Forum!

We have created VPN L2TP, started with one l2tp user, we were struggling with it (mainly for several linux distribution users). Now it works fine for user l2tp in group l2tp_test_group. All necessary servers are accessible (even behind tunnel to AWS).

However once I add another user into this group, or just create brand new user and add into this group. The user can login to VPN via L2TP, has certain IP (till now, everything is good). But once I try to connect to AWS, this connection is not possible.

I download configuration file and tried search for l2tp user - if there is not somewhere just user l2tp - and result is no, everywhere (connected with l2tp) is l2tp_test_group.

Do you know where the issue may be?

Thanks a lot!
Stefan

Zyxel_Stanley · July 2018

Hi @pista

Welcome to Zyxel community.

As your scenario to transmitting traffic to Site to Site VPN tunnel which peer is AWS

The policy route rule is required.

Image: https://us.v-cdn.net/6029482/uploads/editor/qz/n1aek9hpmb6d.jpg

And also you can monitor the packets has routed into AWS VPN by outbound field and gets response from peer by inbound field.

(Monitor > VPN Monitor> IPSec)

Image: https://us.v-cdn.net/6029482/uploads/editor/oz/afwe24vffpar.jpg

pista · July 2018

Hi Stanley,

I am afraid that you didn't get my point, all these settings are properly set (I believe), the issue is, when I add another user to l2tp_test_group, the connection is not possible.

The first (original) user in the group is able to connect to AWS but another user is not. The new user is just able to connect into L2TP.

Would it be possible to describe you all our settings and topology in PM? Just to check, if everything is OK.

Thanks a lot.

L2TP VPN works for one user, another user doesn't

All Replies

Categories

Security Highlight

Security Help Center