Technical Tip: Configuring FortiGate as a PPTP VPN client
Description
This article describes that even though on most PPTP VPN configurations, the FortiGate typically acts as a DialUp server; certain environments may require the firewall to act as a client instead.
Scope
FortiGate.
Solution
Prerequisites:
PPTP client must be enabled on an internet-facing physical interface:
- The FortiGate unit must be operating in NAT mode.
- It must have a static public IP address.
- FortiGate is not running High Availability.
PPTP client must be enabled on an internet-facing physical interface:
config sys int
edit wan1
set pptp-client enable
set pptp-user user-test
set pptp-pass *******
set pptp-auth-type auto
set pptp-server-ip 65.x.x.x.
set l2forward enable
end
To troubleshoot PPTP VPN tunnel connectivity :
To enable the Debug:
diagnose debug reset
diagnose debug application pptp -1
diagnose debug enable
To disable the Debug:
diagnose debug application pptp 0
diagnose debug disable
diagnose debug reset
Related article:
Technical Tip : Troubleshooting PPTP VPN users experiencing disconnections on the FortiGate
