• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

L2TPv3 Cisco VyOS

xtropx

n00b
Joined
Oct 6, 2011
Messages
37
I am having problems getting a L2TPv3 tunnel up between the two systems.

[SUBNET ASR 9k] <===> [CISCO 2811] <===> INTERNET <===> [VYOS IN DC] <===> VM Hosts

Cisco Config:

pseudowire-class PSE-L2TPv3
encapsulation l2tpv3
interworking ethernet
protocol none
ip local interface FastEthernet0/1

interface FastEthernet0/0
description *** WAN ***
no ip address
duplex auto
speed auto
xconnect 209.XXX.XXX.123 1000 encapsulation l2tpv3 manual pw-class PSE-L2TPv3
l2tp id 4000 3000
l2tp cookie local 4 0
l2tp cookie remote 4 0
end

interface FastEthernet0/1
description *** NEW WAN IP ***
ip address 208.XXX.XXX.2/29
ip access-group WAN_SECURITY_INBOUND in
duplex auto
speed auto
no keepalive
end


VYOS:

interfaces {
bridge br200 {
address 208.XXX.XXX.90/27 THIS IS AN ADDRESS IN THE SUBNET ON THE 9K
}
dummy dum200 {
address 172.16.200.201/32
}
ethernet eth0 {
address 209.XXX.XXX.123
duplex auto
firewall {
in {
name OUTSIDE-IN
}
}
hw-id 00:0c:29:50:f5:60
smp_affinity auto
speed auto
}
ethernet eth1 {
bridge-group {
bridge br200
}
duplex auto
hw-id 00:0c:29:50:f5:6a
policy {
}
smp_affinity auto
speed auto
}
l2tpv3 l2tpeth0 {
bridge-group {
bridge br200
}
encapsulation ip
local-ip 209.XXX.XXX.123
peer-session-id 4000
peer-tunnel-id 1000
remote-ip 208.XXX.XXX.2
session-id 3000
tunnel-id 1000
}
loopback lo {
}
}


Cisco:


2811#checkt

L2TP Session Information Total tunnels 0 sessions 1

Session id 4000 is up, logical session id 32781, tunnel id n/a
Remote session id is 3000, remote tunnel id n/a
Locally initiated session
Unique ID is 28
Session Layer 2 circuit, type is Ethernet, name is FastEthernet0/0
Session vcid is 1000
Circuit state is UP
Local circuit state is UP
Remote circuit state is UP
Call serial number is 0
Remote tunnel name is
Internet address is 209.XXX.XXX.123
Local tunnel name is
Internet address is 208.XXX.XXX.2
IP protocol 115
Session is manually signaled
Session state is established, time since change 00:23:42
47 Packets sent, 0 received
6157 Bytes sent, 0 received
Last clearing of counters never
Counters, ignoring last clear:
47 Packets sent, 0 received
6157 Bytes sent, 0 received
Receive packets dropped:
out-of-order: 0
other: 0
total: 0
Send packets dropped:
exceeded session MTU: 0
other: 0
total: 0
DF bit off, ToS reflect disabled, ToS value 0, TTL value 255
Sending UDP checksums are disabled
Received UDP checksums are verified
Session cookie information:
local cookie, size 4 bytes, value 00 00 00 00
remote cookie, size 4 bytes, value 00 00 00 00
FS cached header information:
encap size = 28 bytes
45000014 00000000 ff739d2c d07b1b02
d151617b 00000bb8 00000000
Sequencing is off
Conditional debugging is disabled
SSM switch id is 4109, SSM segment id is 8216
 
Back
Top