L2TP over IPsec VPN - Vigor Router to ExpressVPN [EN]

We will introduce how to create L2TP over IPsec VPN tunnel from Vigor Router to ExpressVPN server in this document.

( für Deutsch klicken Sie hier )

ExpressVPN Setup

1. Create and activate ExpressVPN account via https://www.expressvpn.com/de

2. Select VPN server and view credentials. See https://www.expressvpn.com/de/setup#manual for the required login credentials for the VPN setup.

express-vpn express-vpn express-vpn express-vpn

a) VPN protocol: PPTP & L2TP-IPSec
b) IPsec Pre-Shared Key
c) Username and passwort
d) Server address

Vigor-Router Setup

1. Go to VPN and Remote Access >> LAN to LAN.

LAN-to-LAN LAN-to-LAN LAN-to-LAN LAN-to-LAN

Click on an available "index" number and edit the profile as follows:

a. In Common Settings:

  • Give it a profile name and Enable this profile
  • Set Call Direction to Dial-Out
  • Select WAN interface that the VPN will Dial-Out Through
vpn-common-settings vpn-common-settings vpn-common-settings vpn-common-settings

b. In Dial-Out Settings:

  • Select L2TP with IPsec Policy and Must
  • Enter the VPN server IP address/ Hostname
  • Enter the Username and Password
  • Click on IKE Pre-Shared Key and add the "PSK"
  • Select AES with Authentication as IPsec Security
vpn-dial-out vpn-dial-out vpn-dial-out vpn-dial-out

c. In TCP/IP Network Settings:

  • Enter Remote Network IP /Mask as 0.0.0.0/00
  • Select NAT for this VPN connection
  • Enable Change Default Route to this VPN tunnel option if you want all traffics to go with ExpressVPN server.
lan-to-lan-tcp lan-to-lan-tcp lan-to-lan-tcp lan-to-lan-tcp

2. After finishing above settings, we can check the VPN status via VPN and Remote Access >> Connection Management page.

connection-management connection-management connection-management connection-management

3. We can create Policy Route via Routing >> Load-Balance/Route Policy to define some specific traffic to go via the ExpressVPN tunnel.

Route-Policy Route-Policy Route-Policy Route-Policy
load-balance load-balance load-balance load-balance

In addition to ExpressVPN, VPN configuration is also possible with other VPN providers:

Instruction NordVPN Instruction Perfect Privacy