# xl2tpd client config.
# Connection name MUST be "vpn-connection" (hardcoded in vpn-up.sh and sefaz.py).
#
# Install:
#   sudo cp → /etc/xl2tpd/xl2tpd.conf
#   Also place PPP options at /etc/ppp/options.l2tpd.client
#     (from options.l2tpd.client.example)
#   Also place chap-secrets / pap-secrets with L2TP user/password (NOT in git).
#   sudo systemctl enable --now xl2tpd
#
# Bring up (or use deploy/vpn-up.sh):
#   sudo ipsec up l2tp-ipsec
#   echo "c vpn-connection" | sudo tee /var/run/xl2tpd/l2tp-control

[global]
ipsec saref = yes
saref refinfo = 30

[lac vpn-connection]
lns = VPN_GATEWAY_IP_OR_HOST
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd.client
length bit = yes