Don't know how to setup l2tp VPN

VPN
1

I’ve read the few guides available online, but I’m having SO much trouble setting up VPN. I’m trying to setup a L2TP VPN connection to my office and I get the error “VPN plugin missing”.

I’ve followed the guides for network manager, openswan, and the likes. But it’s the configuration of that bogs me down. I’m kinda bummed out this isn’t just supported by default.

Running latest Manjaro (fresh download and install 2 days ago).

Anybody can point me to a good guide? If you point me to the archwiki one, I’m basically stuck at the config steps right after install, as it’s pretty much configuring the VPN via editing the config files but what I’m hoping to achieve is for the VPN connection from “Connections” in Settings to work… basically I wanna install the “plugins” that they say are missing.

2

Enable AUR in pamac settings (Preferences → AUR tab ) and install networkmanager-l2tp package.

During the installation it will ask you to choose optional dependencies - select either strongswan or libreswan for IPSec support (I use strongswan).

After that you will be able to setup l2tp VPN in network manager GUI.

3

You’re a gem, thanks for this. I was manually CLI-ing my way thru it and just couldn’t find networkmanager-l2tp (cos i wasn’t checking AUR).

It’s still not working, but I’m quite sure it’s a config issue with the server.

Thanks!

4

Yeah, you need to check exact configuration with your server. L2TP connection consists from 2 parts: IPSec that creates a secure tunnel between you machine and the server, and PPP that create actual VPN.

You need to manually specify what encryption is used in IPSec, e.g 3des-sha1-modp1024 for phase1 and 3des-sha1 for phase2, and provide pre-shared key.

For PPP you need to check what authentication methods are supported by the server and if MPPE encryption is used or not.

This is in addition to username and password in the general configuration tab.

5

I see. I have added a PSK but assuming I have no info on phase 1 and 2, what do you think is the likely default?

I’m trying to connect to a QNAS NAP.

6

try 3des-sha1-modp1024 and 3des-sha1. Those are pretty common cipher suites on most modern systems.

As for PPP authentication methods - try to enable all and if it works, start disabling most insecure ones like PAP and CHAP and MSCHAP one by one.