Pptp Example - Netopia 4541 User Reference Manual

10-24 User's Reference Guide

PPTP example

To enable a firewall to allow PPTP traffic, you must provision the firewall to allow inbound and outbound TCP
packets specifically destined for port 1723. The source port may be dynamic, so often it is not useful to apply
a compare function upon this portion of the control/negotiation packets. You must also set the firewall to allow
inbound and outbound GRE packets, enabling transport of the tunnel payload.
From the Main Menu navigate to Display/Change IP Filter Set, and from the pop-up menu select Basic Firewall.
Main
Menu
Select Display/Change Input Filter.
Display/Change Input Filter screen
+--#----Source IP Addr----Dest IP Addr------Proto-Src.Port-D.Port--On?-Fwd--+
+---------------------------------------------------------------------------+
| 1 0.0.0.0
| 2 0.0.0.0
|
+---------------------------------------------------------------------------+
Select Input Filter 1 and press Return. In the Change Input Filter 1 screen, set the Destination Port information
as shown below.
Enabled:
Forward:
Source IP Address:
Source IP Address Mask:
Dest. IP Address:
Dest. IP Address Mask:
Protocol Type:
Source Port Compare...
Source Port ID:
Dest. Port Compare...
Dest. Port ID:
Established TCP Conns. Only:
Select Input Filter 2 and press Return. In the Change Input Filter 2 screen, set the Protocol Type to allow GRE
as shown below.
System
Configuration
0.0.0.0
0.0.0.0
Change Input Filter 1
Filter
Display/Change
Sets
Filter Set
TCP NC
TCP NC
Yes
Yes
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
TCP
No Compare
0
Equal
1723
No
Basic
Firewall
=2000 Yes No |
=6000 Yes No |
|