Vpn Pptp; Pptp Range - Fortinet Fortigate-5000 series Administration Manual

VPN PPTP

VPN PPTP

PPTP Range

FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102
FortiGate units support PPTP to tunnel PPP traffic between two VPN peers.
Windows or Linux PPTP clients can establish a PPTP tunnel with a FortiGate unit
that has been configured to act as a PPTP server. As an alternative, you can
configure the FortiGate unit to forward PPTP packets to a PPTP server on the
network behind the FortiGate unit.
PPTP VPN is available only in NAT/Route mode.The current maximum number of
PPTP and L2TP sessions is 254. The start and end IPs must be in the same 24-
bit subnet, e.g. x.x.x.1. - x.x.x.254.
This section explains how to use the web-based manager to specify a range of IP
addresses for PPTP clients. For information about how to perform other related
PPTP VPN setup tasks, see the
The following topics are included in this section:
• PPTP Range
You can specify a PPTP address range on the PPTP Range page. The PPTP
address range is the range of addresses reserved for remote PPTP clients. When
the remote PPTP client connects, the FortiGate unit assigns an IP address from a
reserved range of IP addresses to the client PPTP interface. The PPTP client
uses the assigned IP address as its source address for the duration of the
connection.
To enable PPTP and specify the PPTP address range, go to VPN > PPTP >
PPTP Range, select the required options, and then select Apply.
Figure 185:Edit PPTP range
Enable PPTP Select the option. You must add a user group before you can select the
option. See
Starting IP Type the starting address in the range of reserved IP addresses.
Ending IP Type the ending address in the range of reserved IP addresses.
User Group Select the name of the PPTP user group that you defined.
Disable PPTP Select the option to disable PPTP support.
FortiGate PPTP VPN User
"User group" on page 327.
PPTP Range
Guide.
303