L2TP and CARP Failover

stanthewizard

Hello

I'm trying to add an L2TP VPN but the only interface available is the WAN.

In my scenario with CARP Failover, the VIP should be used ? not the WAN ?

Am I wrong ?
If not, i'm unable to add the L2TP VPN

Thanks

jimp

It doesn't properly support that yet in the L2TP options.

Just setup a port forward for udp/1721 on the carp vip to 127.0.0.1:1721

stanthewizard

I created this NAT
WAN UDP * * 192.168.10.200 1701 (L2TP) 127.0.0.1 1701 (L2TP)

With this rule
IPv4 UDP * * 127.0.0.1 1701 (L2TP) * none NAT

It doesn't work ….

HAve you got any idea why ?

jimp

Is your WAN IP really 192.168.10.200? If so, you're behind NAT and you'll need to make sure whatever is ahead of you there is forwarding udp/1721 to 192.168.10.200
If 192.168.10.200 is not your WAN CARP VIP, change the rule to use your WAN CARP VIP there instead.

stanthewizard

IT is ! ;)

This unique IP is the DMZ