Support schedule

Monday to Friday 08:00 AM to 05:00 PM. (MET)
Our current response time is *48h but we usually manage to get a faster response.
*esclated tickets might require more time

 Most Popular
Help & FAQ: Linux Installation
L2TP/IPSec and PPTP on Linux
Posted by Uli Brügmann on 25 February 2013 11:58 AM

L2TP (Layer 2 Tunneling Protocol) with IPSec (Internet Protocol Security) and PPTP (Point to Point Tunneling Protocol) are both VPN protocols for getting access to the CyberGhost network, e. g. for devices like Smartphones and Tablets, but also for operating systems like, in this case, Linux.

PPTP is usually a part of any Linux distribution, but you should know, that PPTP has already been compromised and therefore should only be used, if none of the other options (L2TP/IPSec or OpenVPN) is available. Whether L2TP or OpenVPN is available depends on your distribution.

With Linux you can use your CyberGhost subscription with L2TP/IPSec or PPTP, if the following preconditions are met:

Step 1

Visit your CyberGhost VPN online account.

Log in ...

Log-in with your user data and click in the upper menu on the entry 'My Devices'. 

Click on 'My Devices'

Specify the device type, in this case it's 'Other devices'.

Click on 'Other Devices'

Specify the protocol you want to use and make sure you have chosen 'Linux' as the operating system.

  • PPTP: Note to use this protocol just in case none of the other possibilities (L2TP/IPSec, OpenVPN or the CyberGhost client) is available for your system or doesn't work. PPTP can't be considered safe anymore (but is still better than being completely unprotected). How to configure PPTP is shown below. It doesn't differ very much from configuring L2TP/IPSec.
  • L2TP: L2TP/IPSec is in terms of online security the number 2 (while OpenVPN is number 1). How to configure L2TP/IPSec is shown in step 2

Specify operating system and wanted protocol

Any single L2TP or PPTP connection can naturally just be configured with exactly one server address. So the next thing to do is to choose the country you want to surf from (the server inside this country will be chosen automatically by CyberGhost as the most convenient server available). 

Specify location  

Once done, please note down the following data, which you will need to configure your L2TP or PPTP connection:

  • Server: This is the server address of the country you want to surf from, e.g. ''*. If you want to connect to different locations, you need to adjust the target destination to another country and note down that 2nd, 3rd, 4th ... address as well.
  • Username: Your CyberGhost user name. 
  • Password: This is your password for protocol usage. This password IS NOT your usual CyberGhost password, but is created solely for protocol usage.
  • Pre shared secret: L2TP connections need this additional password (NOT needed for PPTP connections)

Copy your configuration data

Step 2

Now start your Linux L2TP/IPSec or PPTP configuration. The way to get to the right settings will most certainly vary between different distributions, but the main steps are nearly everywhere more or less identical.

First open your general settings, e.g. with the Chakra distribution via 'Start menu > System Settings'. Here you will find most certainly a section called 'Network Settings'. That's the one to open. Using Ubuntu it's 'System > Settings > Network Connections'.

Now add a network connection. Here with Chakra you activate the tab 'VPN', click on 'Add' and choose the type of connection you want to add, in this case 'L2TP/IPSec' or 'PPTP'. If the type is missing, your distribution lacks it and it needs to be installed first.

Now click on 'Activate connection with Desktop' and 'Next'.

Step 3

Choose a description or name of your new connection, which should reflect the country of the server you want to surf from (e.g. ‘CyberGhost VPN US’). The other settings:

  • As the 'Server' (sometimes also indicated as 'Gateway') fill in one of the addresses you noted before, e.g. ''*.
  • As the 'Account' or 'User name' please use your regular CyberGhost VPN user name.
  • Now type in the password that has been generated for you in your online account. DO NOT use your regular CyberGhost account password.
  • For L2TP connections you furthermore need to type in the ‘Secret Key/PSK' you also noted (NOT needed for PPTP connections).

Click on ‘OK’, when you’re done.

Step 4

Now your new connection should be part of your list of network connections which should also be accessible via the 'System Settings' of your distribution. Often these settings can also be accessed through the task bar.

If you want to have a L2TP/IPSec or PPTP VPN connection for each country CyberGhost operates server in, please repeat all steps for each of the other addresses CyberGhost provides you with, when choosing the country. 

 Please note!

Certain routers need you to activate the L2TP/IPSec protocol. How you can accomplish that task should be documented in your router's manual.

* In all Premium or Premium Plus plans it's necessary to enter the address in the shape of '', e.g'. With other subscription types such as Special Editons or promotions a slightly changed variation of this address takes place:

Plan name

Customized URL



German/Romanian package

Promo Special Edition 2

Promo Special Edition 3

Promo Special Edition 4

Special Edition 2

Special Edition 3

WorthOfPrivacy Edition

(38 vote(s))
This article was helpful
This article was not helpful

© CyberGhost VPN