Configure an L2TPv3 tunnel

Your Connect EZ device supports Layer 2 Tunneling Protocol Version 3 (L2TPv3) static unmanaged Ethernet tunnels.

Required configuration items

Additional configuration items


  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click VPN > L2TPv3 ethernet.
  4. For Add L2TPv3 ethernet tunnel, type a name for the tunnel and click .
  5. For Remote endpoint, type the IPv4 address of the remote endpoint.
  6. For Local endpoint, select the interface that will be the local endpoint.
  7. For Tunnel ID, type the tunnel identifier for this tunnel. This must match the value for Peer tunnel ID on the remote peer. Allowed value is any integer between 1 and 4294967295.
  8. For Peer tunnel ID, type the Tunnel ID of the remote peer.
  9. (Optional) For Encapsulation type, select either UDP or IP. If UDP is selected:
    1. For UDP source port, type the number of the source UDP port to be used for the tunnel.
    2. For UDP destination port, type the number of the destination UDP port to be used for the tunnel.
    3. (Optional) Click to enable UDP checksum to calculate and check the UDP checksum.
  10. Click to expand Sessions.
    1. For Add Sesssion, type a name for a session carried by the parent tunnel and click .
    2. For Session ID, type the session identifier for this session. This must match the value for Peer session ID on the remote peer. Allowed value is any integer between 1 and 4294967295.
    3. For Peer session ID, type the Session ID of the remote peer.
    4. (Optional) For Cookie, type the cookie value to be assigned to the session. Allowed value is 8 or 16 hex digits.
    5. (Optional) For Peer cookie, type the Cookie value of the remote peer.

    6. For Layer2SpecificHeader type, select the Layer2Specific header type. This must match what is configured on the remote peer.

    7. For Sequence numbering control, determine the sequence number control to prevent or detect out of order packets. Allowed values are:

      • None: No sequence numbering.

      • Send: Add a sequence number to each outgoing packet.

      • Receive: Reorder packets if they are received out of order.

      • Both: Add a sequence number to each outgoing packet, and reorder packets if they are received out of order.

      8. The default is None.

    8. Repeat for additional sessions.
  11. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the Connect EZ local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Add a L2TPv3 Ethernet tunnel. For example, to add a tunnel named L2TPv3_example:
    (config)> add vpn l2tpv3 L2TPv3_example
(config vpn l2tpeth L2TPv3_example)>

    The tunnel is enabled by default. To disable:

    (config vpn l2tpeth L2TPv3_example)> enable false
(config vpn l2tpeth L2TPv3_example)>

  4. Set the IPv4 address of the remote endpoint:
    (config vpn l2tpeth L2TPv3_example)> remote IP_address
(config vpn l2tpeth L2TPv3_example)>
  5. Set the interface of the local endpoint:
      2. Set the interface. For example:
        (config vpn l2tpeth L2TPv3_example)> local /network/interface/eth1
(config vpn l2tpeth L2TPv3_example)>
  6. Set the tunnel identifier for this tunnel. This must match the value for peer tunnel ID on the remote peer.
    (config vpn l2tpeth L2TPv3_example)> tunnel_id value
(config vpn l2tpeth L2TPv3_example)>

    where value is any integer between 1 and 4294967295.

  7. Set the tunnel ID of the remote peer:
    (config vpn l2tpeth L2TPv3_example)> peer_tunnel_id value
(config vpn l2tpeth L2TPv3_example)>

    where value is any integer between 1 and 4294967295.

  8. (Optional) Set the encapsulation type:
    (config vpn l2tpeth L2TPv3_example)> encapsulation  value
(config vpn l2tpeth L2TPv3_example)>

    where value is either udp or ip. The default is upd.

    If udp is set:

    1. Set the source UDP port to be used for the tunnel:
      (config vpn l2tpeth L2TPv3_example)> udp_source_port port
(config vpn l2tpeth L2TPv3_example)>
    2. Set the destination UDP port to be used for the tunnel.
      (config vpn l2tpeth L2TPv3_example)> udp_destination_port port
(config vpn l2tpeth L2TPv3_example)>
    3. (Optional) To calculate and check the UDP checksum:
      (config vpn l2tpeth L2TPv3_example)> udp_checksum true
(config vpn l2tpeth L2TPv3_example)>
  9. Add a session carried by the parent tunnel:
    (config vpn l2tpeth L2TPv3_example)> add session session_example
(config vpn l2tpeth L2TPv3_example session_example)>
  10. Set the session identifier for this session. This must match the value for peer session ID on the remote peer.
    (config vpn l2tpeth L2TPv3_example session_example)> session_id value
(config vpn l2tpeth L2TPv3_example session_example)>

    where value is any integer between 1 and 4294967295.

  11. Set the session ID of the remote peer:
    (config vpn l2tpeth L2TPv3_example session_example)> peer_session_id value
(config vpn l2tpeth L2TPv3_example session_example)>

    where value is any integer between 1 and 4294967295.

  12. (Optional) Set the cookie value to be assigned to the session.
    (config vpn l2tpeth L2TPv3_example session_example)> cookie value
(config vpn l2tpeth L2TPv3_example session_example)>

    Allowed value is 8 or 16 hex digits.

  13. (Optional) Set the cookie value of the remote peer:
    (config vpn l2tpeth L2TPv3_example session_example)> peer cookie value
(config vpn l2tpeth L2TPv3_example session_example)>

    Allowed value is 8 or 16 hex digits.

  14. Set the Layer2Specific header type. This must match what is configured on the remote peer.
    (config vpn l2tpeth L2TPv3_example session_example)> l2spec_type value
(config vpn l2tpeth L2TPv3_example session_example)>

    where value is either none or default. The default is default.

  15. Set the sequence number control to prevent or detect out of order packets.
    (config vpn l2tpeth L2TPv3_example session_example)> seq value
(config vpn l2tpeth L2TPv3_example session_example)>

    where value is one of:

    • none: No sequence numbering.

    • send: Add a sequence number to each outgoing packet.

    • recv: Reorder packets if they are received out of order.

    • both: Add a sequence number to each outgoing packet, and reorder packets if they are received out of order.

      The default is none.

  16. Save the configuration and apply the change.
    (config)> save
Configuration saved.
>
  17. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.