L2TP Traffic Blocked Outbound

In some cases, such as when combined with IPsec, L2TP traffic may also require special handling via floating rules. This appears as blocked traffic in the outbound direction in the firewall logs, showing an L2TP server interface.

If this happens, add a floating rule as follows:

• Navigate to Firewall > Rules, Floating tab
  • Click [Image unavailable in the source] Add to add a new rule to the top of the list
  • Set Action to Pass
  • Check Quick
  • Select L2TP VPN for the Interface
  • Set Direction to Out
  • Set Protocol to TCP
  • Set Source/Destination as needed, or set to any
  • Advanced Features:
    • Set TCP Flags to Any flags
    • Set State Type to Sloppy State