Closed wfrced closed 5 years ago
I did notice the following command-line instructions previously:
The following lists the current attributes that can be used in the [vpn]
section of the l2tp connection file :
It's going to be pretty difficult to write a generic connection template that will work for everybody. e.g. ipsec-ike and ipsec-esp often need to be set and can be different between stongswan and libreswan. Some people prefer not to store the plain text password in the connection file. In newer versions the PSK is now Base64 encoded (but that shouldn't matter as it is backwards compatible with plain text). It also now supports user and machine certificates (which really convolutes things as PKCS#12 certificates are handled differently to X509 certificates).
As it turns out, it's very simple but not entirely obvious. Copying a customized example into /etc/NetworkManager/system-connections/l2tp-vpn.nmconnection and restarting NetworkManager will make it pick the profile up.