Networking – Wireless router with built-in VPN client

vpnwireless-networking

Is there such a Wifi router that also has a built-in L2TP/IPsec VPN client? I want to share a VPN connection from multiple wifi clients but without having to setup VPN on each and individual client.

Best Answer

What you want is a VPN router. DLink makes several like this one here. I'm certain Netgear and Linksys make them as well, they are often used by remote offices to connect to a larger corporate network.

Related Solutions

MacOS – OS X 10.7, can’t log into any L2TP VPN server

Turns out that something (possibly CiscoAnyconnect) has unloaded racoon on startup. To fix (with Anyconnect uninstalled) do the following:

launchctl load -w /System/Library/LaunchDaemons/com.apple.racoon.plist

You may also start racoon manually by:

sudo /usr/sbin/racoon

Mikrotik Firewall rule: block all connection except to VPN server

PPTP uses

TCP port 1723
GRE (protocol ID 47) for tunneling

Accept PPTP in Mikrotik:

/ip firewall filter add chain=input action=accept protocol=tcp dst-port=1723
/ip firewall filter add chain=input action=accept protocol=gre

L2TP/IPSec uses

TCP port 1701
UDP port 500 for Security Association (SA) - to negotiate security method (password, certificate, kerberos)
AH (Protocol ID 50) - Authentication Header
ESP (Protocol ID 51) - Encapsulated Secure Payload

Accept L2TP/IPSec in Mikrotik:

/ip firewall filter add chain=input action=accept protocol=tcp dst-port=1701
/ip firewall filter add chain=input action=accept protocol=udp dst-port=500
/ip firewall filter add chain=input action=accept protocol=ipsec-ah
/ip firewall filter add chain=input action=accept protocol=ipsec-esp

Block all other incoming connection (TCP)

/ip firewall filter add chain=input protocol=tcp action=reject reject-with=tcp-reset

You can use action=drop instead of reject, but according to Hannes Schmidt, NMAP can still see the port is open but dropped (filtered) by firewall

Best Answer

Related Solutions

MacOS – OS X 10.7, can’t log into any L2TP VPN server

Mikrotik Firewall rule: block all connection except to VPN server

Related Question