Knowledge Base  >   VPN  > 

L2TP over IPsec from iOS to Vigor Router

This article explains how to configure a Vigor Router as an L2TP over IPsec VPN server and how to establish an L2TP VPN connection from iOS to access the Vigor Router’s private network. *L2TP over IPsec VPN is supported on DrayOS 5 routers starting from firmware version 5.3.6

This article demonstrates how to set up Vigor Router as an L2TP VPN server for iPhone, and how to establish an L2TP VPN from iPhone to connect to the private network of Vigor Router.

Vigor Router Setup

1. Go to VPN and Remote Access >> Remote Access Control Setup, and make sure "Enable IPsec VPN Service" and "Enable L2TP VPN Service" are both checked.

a screenshot of VPN access setup on DrayOS

2. Go to VPN and Remote Access >> Remote Dial-in User, click on an available index number and edit the profile as follows:

  1. Check Enable this account
  2. Select "L2TP" for Allowed Dial-In Type and also select "Must" for IPsec Policy
  3. Enter username and password, which will be used for the VPN settings on iPhone later.
  4. Click OK to save
a screenshot of Remote Dial-In user profile on DrayOS

3. Create VPN IKE Pre-Shared Key: Go to VPN and Remote Access >> IPsec General Setup, enter Pre-Shared Key and confirm it. Click OK to save

a screenshot of IPsec setup on DrayOS


Establish VPN from iPhone

4. On the iPhone, go to Settings >> VPN, and tap Add VPN Configuration.

  1. Select "L2TP" for Type and Description
  2. Enter the WAN IP of the router for Server.
  3. Enter Account and Password, which are the username and password set up in step 2.
  4. Enter Secret as the Pre-Shared Key set in step 3.
  5. Tap Done to save the settings
a screenshot of VPN setup on IPhone

5. Once we finish the above settings, select the profile and switch on VPN connection. When the VPN connected successfully, there will be a "VPN" icon on the top of the screen. We can also tap the profile to see more details, such as assigned IP address and connect time.

a screenshot of VPN setup on IPhone

6. We can also check the VPN client status from the router by visiting VPN and Remote Access >> Connection Management.

a screenshot of VPN status on DrayOS
Vigor Router Setup

1. Make sure the router is connected to the Internet and has a public WAN IP address so that VPN clients on the Internet can reach it.

2. Activate the IPsec and L2TP VPN service.

Go to VPN > General Setup,

  • Switch on the Enable option under the IPsec tab
  • Enter the General PSK
  • Click the L2TP tab, then switch on the L2TP Enabled option
  • Click Apply to Save the settings

    • 3. Create a Teleworker VPN User Profile.

    Go to VPN > Teleworker VPN, click Add. Enter the Username, toggle Teleworker VPN and enter Password.

    In General Tab,

  • Status: Set to Active to enable the profile.
  • Group Policy: Select None if no specific group policy applies.
  • Expiration Time: Set the expiration time for the Telework VPN profile. Options include Never, after XX hours, or at a specified date and time.

    • In the Teleworker VPN tab,

  • Enter 0 (Seconds) for the Idle Timeout
  • Select the VPN Schedule. This article uses Always On, which means the VPN Client can dial in at anytime.
  • Under Allowed VPN Protocols, toggle IPsec, then select IKEv1/v2 and L2TP.
  • Select Must for L2TP with IPsec Policy
  • In Local IP Assignment, choose a LAN subnet for Assign IP from the LAN DHCP or configure a static IP for Static IP.
  • Click Apply to save the settings.
    • iOS VPN Client Setup
    1. Go to Settings >> General >> VPN and tap Add VPN Configuration.

    2. Edit the configuration as follows:

  • Enter a Description for the Profile
  • Select "L2TP" for Type
  • Type the WAN IP or hostname of the router at Server
  • Type the UserName at Account
  • Type the Password
  • Type the Pre-shared key in the router's IPsec General Setup at Secret
  • Tap Done

    • 3. Switch on Status to start the L2TP over IPsec VPN connection to Vigor Router.

    4. To check whether a VPN user is online or not, we could navigate to VPN / VPN Connection Status / Teleworkers VPN.

    Published On:2026-02-24 

    Share

    Was this helpful?   

    book icon

    Knowledge Base