Pptp Passthrough - Fortinet FortiGate FortiGate-1000 Administration Manual
Fortinet fortigate fortigate-1000: user guide
Hide thumbs
Also See for FortiGate FortiGate-1000:
- Install manual (66 pages) ,
- Installation manual (56 pages) ,
- Quick start manual (2 pages)
Table of Contents
Advertisement
PPTP
10
PPTP passthrough
264
3
Select Typical to configure typical settings.
4
Select Advanced to configure advanced settings.
5
Select Settings.
6
Select Challenge Handshake Authentication Protocol (CHAP).
7
Make sure that none of the other settings are selected.
8
Select the Networking tab.
9
Make sure that the following options are selected:
•
TCP/IP
•
QoS Packet Scheduler
Make sure that the following options are not selected:
•
File and Printer Sharing for Microsoft Networks
•
Client for Microsoft Networks
11
Select OK.
To connect to the PPTP VPN
1
Connect to your ISP.
2
Start the VPN connection that you configured in the previous procedure.
3
Enter your PPTP VPN User Name and Password.
4
Select Connect.
5
In the connect window, enter the User Name and Password that you use to connect to
your dialup network connection.
This user name and password is not the same as your VPN user name and password.
The FortiGate unit supports PPTP passthrough by configuring a port forwarding virtual
IP to use port 1723. Normally, PPTP passthrough requires the generic routing
encapsulation (GRE) protocol on IP port 47. When you configure PPTP passthrough
using the following procedure, the FortiGate unit automatically enables the GRE
protocol for PPTP passthrough configurations. You do not have to configure a
separate GRE virtual IP.
You configure PPTP passthrough by configuring a dynamic port forwarding virtual IP
address that uses port 1723. Then add the virtual IP address to a firewall policy. The
following procedures describe how to configure PPTP passthrough to allow PPTP
packets from the internet to connect to a PPTP server on the internal network. In this
example, the PPTP server IP address is 192.168.23.1.
To configure a dynamic port forwarding virtual IP for port 1723
1
Go to Firewall > Virtual IP.
2
Select Create New.
3
Enter a name for the virtual IP, for example PPTP_pass.
4
Set the External Interface to external.
01-28006-0009-20041105
VPN
Fortinet Inc.
Advertisement
Table of Contents
