How to set up L2TP/IPsec on Linux
L2TP/IPsec is built into iPhone, iPad, Mac and Windows, so no app is needed. You need the server address, your username and password, and the pre-shared key.
Last reviewed
What you need
- An active L2TP/IPsec configuration from this site
- Server address, username, password and pre-shared key (IPsec) from your configuration page
Where each detail goes
| On your configuration page | In the app or settings |
|---|---|
| Server | Server / Server address / Gateway |
| Username | Account / User name |
| Password | Password |
| Pre-shared key (IPsec) | Secret / Shared secret / Pre-shared key |
Steps
-
Install the plugin:
sudo apt install network-manager-l2tp-gnome(Debian/Ubuntu) orsudo dnf install NetworkManager-l2tp-gnome(Fedora).
Illustration — your app may look slightly different. -
Open Settings → Network → VPN + → Layer 2 Tunneling Protocol (L2TP).
Illustration — your app may look slightly different. -
Gateway: your Server. User name: your username. Password: your password.
Illustration — your app may look slightly different. -
Click IPsec Settings…, enable the IPsec tunnel and enter your Pre-shared key.
Illustration — your app may look slightly different. -
Save and switch the VPN on.
Illustration — your app may look slightly different.
Check that it works
The VPN status shows "Connected". Search the web for "what is my IP"; the location should match your server country.
Disconnect
Switch the VPN off in the network menu.
Troubleshooting
Authentication failed
Re-type the username, password and pre-shared key exactly as shown (they are case-sensitive). The configuration may also have expired.
Connects on mobile data but not on Wi-Fi
Some routers block the ports L2TP/IPsec uses (UDP 500 and 4500). Try another network or use WireGuard or OpenVPN.
The L2TP option is missing
Android 12 and newer, and some managed devices, no longer offer L2TP/IPsec. Use WireGuard or OpenVPN instead.