L2TP / IPSEC, limited number of users.

humaxoid

Hello colleagues! Configured L2TP/IPSEC, but there are restrictions on the number of connections. No more 12 users at one time (or more). Does anyone Have a similar problem? If over this amount, it disables others users.But not all.

viktor_g

@humaxoid
Please check the Number of L2TP Users value
see https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/l2tp-ipsec.html

you can also post /var/etc/l2tp-vpn/mpd.conf for checking

humaxoid

Many thanks Viktor for you support!
I configured it according to this instruction, the link to which you showed.
Number of L2TP Users value = 60
This is my mpd. conf

startup:

l2tps:
	set ippool add p0 192.168.99.64 192.168.99.123

	create bundle template l2tp_b
	set bundle enable compression
	set bundle yes crypt-reqd

	set ccp yes mppc

	set iface name l2tp
	set iface group l2tp
	set iface up-script /usr/local/sbin/vpn-linkup-l2tp
	set iface down-script /usr/local/sbin/vpn-linkdown-l2tp
	set iface disable on-demand
	set iface enable proxy-arp

	set ipcp yes vjcomp
	set ipcp ranges 192.168.99.20/32 ippool p0
	set ipcp dns 77.88.8.88 77.88.8.2

	create link template l2tp_l l2tp
	set link action bundle l2tp_b

	set link yes acfcomp protocomp
	set link enable multilink
	set link no pap chap chap-msv2
	set link enable chap-msv2
	set l2tp self XX.XXX.XX.XXX
	set link keep-alive 10 180
	set link enable incoming

viktor_g

@humaxoid The issue is still present?
How many users can work simultaneously now?

humaxoid

@viktor_g
Differently. Usually 12-18 users. If a new user is connected, the other users are drops. But not all of them.

viktor_g

@humaxoid Need more information
Can you attach L2TP service log?

humaxoid

@viktor_g L2TP Log file is attached l2tp.txt
I think it depends on the load on the channel, but not on the number of connections. At the now moment, 21 users are connected.