How To Setup an L2TP VPN on Ubiquiti USG
This post will cover the basics of configuring an L2TP VPN on any type of USG. Here is a tutorial on how to connect.
Here is another post I made on configuring a site to site VPN between 2 USGs if you are interested.
Parts Used For Project
|USG||Any USG will do. I personally use the USG-PRO-4. It’s a great router for your home if you dont already have one. I assume you already do if you are here.||Unifi Security Gateway|
As an Amazon Associate I earn from qualifying purchases. Purchasing through my Amazon links helps me keep the site up and running.
Creating A RADIUS User
Lets start by creating a new RADIUS user so that we can authenticate with the USG.
Start by going to
CREATE NEW USER.
Below is a table with the information I entered on this screen. Obviously choose your own
Password. I recommend using a strong password for this. It’s basically a key to your network.
I don’t care if you see this password. I deleted this user before I made this post live.
If you have a VLAN you’d like to use, go ahead and enter it here.
|Tunnel Medium Type||
SAVE when finished.
You should now see your newly created user.
Configuring And Enabling RADIUS server
Now we need to configure the RADIUS server.
From the screen we ended on in the last section, select the
Server sub-heading and then switch
Enable RADIUS Server to
You will need another password/secret here. It should be different than the one you used for the user. Don’t be lazy and make them the same. This
Secret *will not be used when connecting to the VPN.
Enter the information as follows.
|Enable RADIUS Server||
|Clients||This is checked and grayed out for me. Just ignore this.|
|Accounting Interim Interval||
APPLY CHANGES when complete.
Creating A New Network
We will now create a new network for out VPN.
Networks from the sidebar menu and then press
CREATE NEW NETWORK.
Pre-Shared Key should also be unique.
Gateway/Subnet you enter here cannot exist already!
|Site-to-Site VPN||If you have a site to site VPN configured and want to expose that network to the remote VPN then go ahead and check this. If not, leave it unchecked.|
SAVE when finished.
You should see our new
Remote VPN network.
Your L2TP VPN is now up and running!
Pretty much every operating system has a built in way to connect to a L2TP VPN.
You will need the following info to connect to your new L2TP VPN…
|IP where USG is located||Get your IP from this site|