SnapGear VPN Router User Manual page 74

Field
Enable PPTP
Server
IP Addresses for
the Tunnel End
Points
Authentication
scheme
Configuring user accounts for VPN server
Once you have set up the VPN server, select Continue and you will be presented with a PPTP VPN
Server Accounts screen.
Virtual Private Networking
Description
Check this box to enable PPTP connections to be established to
your SnapGear VPN Router.
Enter the IP addresses for the tunnel end-points. You will need to
specify a free IP address from your local network that each VPN
client will use when connecting to the SnapGear VPN Router.
Please ensure that the IP addresses listed here are not in the range
the DHCP server can assign. (Ranges are accepted - e.g.
192.168.160.250-254).
PPTP provides an authenticated communication tunnel between a
client and a gateway by using a user ID and password. The
authentication scheme you choose is the method by which the
SnapGear VPN Router will challenge users who endeavor to
establish a PPTP connection to the network. The remote client
must be set up to use the selected authentication scheme.
MSCHAPv2 is the most secure. It uses encrypted passwords.
SnapGear recommends the use of MSCHAPv2 plus data encryption
as this keeps your data private as well as providing secure
authentication.
CHAP is less secure, and similarly PAP is even less secure, but
more common.
RADIUS and TACACS+ make use of a remote authentication server
on the local network. When selected you must enter the IP address
of a server setup to use this scheme.
70