Simultaneous L2TP client-to-site connections for internet access ?

Simultaneous L2TP client-to-site connections for internet access ?

Simultaneous L2TP client-to-site connections for internet access ?
Simultaneous L2TP client-to-site connections for internet access ?
Sunday - last edited Wednesday

Hi, 

 

I can set up a client-to-site l2tp connection for internet access (ie. 0.0.0.0/0) from my vpn provider,

but I can't set up two simultaneous client-to-site connections for internet access.

 

What I want is to access the internet using 
- my vpn connection to UK when I'm connected to my wifi2/vlan2
- my vpn connection to USA when I'm on my wifi3/vlan3
- the default route through my ISP when I'm on wifi1/vlan1

 

Is this possible with the omada controller v5.15.6.7 and an er7206 v2.0 router ?

 

This configuration currently works with a single vpn connection. When I activate the 2nd

vpn connection, then this one never has access to the internet.

(and the other two connections (ie. ISP and vpn1) continue to work normally)

 

Am I missing something? Is it possible to obtain this type of configuration ?

 

Thank you!
 

  0      
  0      
#1
Options
1 Accepted Solution
Re:Simultaneous L2TP client-to-site connections for internet access ?-Solution
Wednesday - last edited Wednesday

Hi  @tip413 

 

Yes, we can do that.

You can create two L2TP VPN tunnels on the router.

Below is the guide on how to do that, starting from Step2:

How to set up PPTP & L2TP VPN client with Omada Gateway in controller mode

 

And configure policy routing:

How to configure Policy Routing on Omada Gateway via Omada Controller

Wish you a happy life and smooth network usage! 
Recommended Solution
  0  
  0  
#2
Options
5 Reply
Re:Simultaneous L2TP client-to-site connections for internet access ?-Solution
Wednesday - last edited Wednesday

Hi  @tip413 

 

Yes, we can do that.

You can create two L2TP VPN tunnels on the router.

Below is the guide on how to do that, starting from Step2:

How to set up PPTP & L2TP VPN client with Omada Gateway in controller mode

 

And configure policy routing:

How to configure Policy Routing on Omada Gateway via Omada Controller

Wish you a happy life and smooth network usage! 
Recommended Solution
  0  
  0  
#2
Options
Re:Simultaneous L2TP client-to-site connections for internet access ?
Thursday

Hi  @Vincent-TP, thank you for your reply.

 

I have two L2TP VPN on the router, and I also configure two policy routing for them.

If I use one of them at the time, it works, but I can't use both of them at the same time.

The 2nd VPN connection activated, has no access to the internet.

 

It look like a route problem, as both vpn have the same "REMOTE LOCAL IP" address of 10.1.2.1 (and I can't change it)

(are these 'remote local ip' locally defined by the vpn controller/client, or we received them from the vpn server?)

 

 

In the Insights/Routing Table, when I activate only 1 VPN connection, I get these two additional routes:
 

ID 4,    Destination: 10.1.2.1,    NextHop: 0.0.0.0,    Interface l2tpUK

ID 14,    Destination: 0.0.0.0,    NextHop: 10.1.2.1,    Interface l2tpUK
 

and it's works as it should. (works with l2tpUK or l2tpUSA, as long as there only one connection enable at the time)

 

When I activate the 2nd VPN connection, there is no new route added for the 2nd VPN, and the 2nd VPN don't have

internet access.

 

I don't have much logs, I don't know how/where to enable a debug mode for that, but maybe there is and

error like "address 10.1.2.1 already in use" somewhere... ? :-)

 

I'm wondering if I could change the REMOTE LOCAL IP of the 2nd VPN connection, maybe there would be two new

routes added, something like

 

ID 5,    Destination: 10.1.3.1,    NextHop: 0.0.0.0,    Interface l2tpUSA

ID 15,    Destination: 0.0.0.0,    NextHop: 10.1.3.1,    Interface l2tpUSA

 

That's wrap up my limited understanding of the situation.

 

 

  0  
  0  
#3
Options
Re:Simultaneous L2TP client-to-site connections for internet access ?
Thursday

Hi  @tip413 

 

How about the remote server of them? Did you use the the same domain name?

 

You can try with different remote subnets, such as changing one of them to 10.1.3.1/24.

Wish you a happy life and smooth network usage! 
  0  
  0  
#4
Options
Re:Simultaneous L2TP client-to-site connections for internet access ?
Yesterday

Hi  @Vincent-TP 

 

Vincent-TP wrote

How about the remote server of them? Did you use the the same domain name?

 

You can try with different remote subnets, such as changing one of them to 10.1.3.1/24.

 

I use a vpn provider (torguard) so I can't change the "remote server" address, I have to use the one from the provider.

 

For the subnets, yes, I try to change it to 10.1.3.1/24, and also to the "remote server /24 network address" from the vpn provider,

but in both cases, it's the same thing: the "remote local ip" is always 10.1.2.1

 

How can I change this 10.1.2.1 address ?

Maybe that's the reason why the routes for the 2nd vpn connection are never added to the routing table... ?


I'm not 100% sure, but I have the impression that this address (10.1.2.1) is "hard-coded" in the omada vpn client.

(If that's the case, then maybe it should be something we can be able to change in the UI.)
 

I will re-read the guides again, I don't know which step I missed.
Thank you Vincent.

  0  
  0  
#5
Options
Re:Simultaneous L2TP client-to-site connections for internet access ?
Yesterday

Hi  @tip413 

So the remote servers are both from the same VPN provider; they just gave you two L2TP VPN client accounts; is that correct?

 

I believe this is as expected. Since the router has only one outbound IP address to connect with the VPN server.

 

To achieve your requirement, you may add an ISP modem or order another VPN server.

 

Wish you a happy life and smooth network usage! 
  0  
  0  
#6
Options