L2TP over IPsec from iOS to Vigor Router

This article demonstrates how to set up Vigor Router as an L2TP VPN server for iPhone, and how to establish an L2TP VPN from iPhone to connect to the private network of Vigor Router.

Vigor Router Setup

1. Go to VPN and Remote Access >> Remote Access Control Setup, and make sure "Enable IPsec VPN Service" and "Enable L2TP VPN Service" are both checked.

2. Go to VPN and Remote Access >> Remote Dial-in User, click on an available index number and edit the profile as follows:

1. Check Enable this account
2. Select "L2TP" for Allowed Dial-In Type and also select "Must" for IPsec Policy
3. Enter username and password, which will be used for the VPN settings on iPhone later.
4. Click OK to save

3. Create VPN IKE Pre-Shared Key: Go to VPN and Remote Access >> IPsec General Setup, enter Pre-Shared Key and confirm it. Click OK to save

Establish VPN from iPhone

4. On the iPhone, go to Settings >> VPN, and tap Add VPN Configuration.

1. Select "L2TP" for Type and Description
2. Enter the WAN IP of the router for Server.
3. Enter Account and Password, which are the username and password set up in step 2.
4. Enter Secret as the Pre-Shared Key set in step 3.
5. Tap Done to save the settings

5. Once we finish the above settings, select the profile and switch on VPN connection. When the VPN connected successfully, there will be a "VPN" icon on the top of the screen. We can also tap the profile to see more details, such as assigned IP address and connect time.

6. We can also check the VPN client status from the router by visiting VPN and Remote Access >> Connection Management.