Skip to main content
wrathyimp
wrathyimp
New Member
August 21, 2016
Question

PPTP default gateway

  • August 21, 2016
  • 1 reply
  • 5918 views

Hi,

 

I have configured the PPTP and able to connect and access the firewall, but can't connect to any of the servers.

config vpn pptp
    set eip 192.168.1.248
    set sip 192.168.1.241
    set status enable
    set usrgrp "VPN"
end

And my PC ipconfig show "default gateway 0.0.0.0"

 

So any firewall policies to be added to pass the traffic to the servers.

    1 reply

    jintrah_FTNT
    Staff
    jintrah_FTNT
    Staff
    August 22, 2016

    Hi,

     

    Please follow the steps in http://kb.fortinet.com/kb...&externalId=100112

    wrathyimp
    wrathyimpAuthor
    New Member
    August 22, 2016

    Yes I did follow this article and created the policy

     

     
        edit "VPN-Users"
            set type iprange
            set end-ip 192.168.1.248
            set start-ip 192.168.1.241
        next
     
     
     
     
    config vpn pptp
        set eip 192.168.1.248
        set sip 192.168.1.241
        set status enable
        set usrgrp "VPN"
    end
     
     
     
     
        edit 9
            set srcintf "external"
            set dstintf "internal"
                set srcaddr "VPN-Users"             
                set dstaddr "all"             
            set action accept
            set schedule "always"
                set service "ANY"             
            set logtraffic enable
        next
     
    This Polciy to give VPN users internet access.
     
        edit 10
            set srcintf "external"
            set dstintf "external"
                set srcaddr "VPN-Users"             
                set dstaddr "WAN1_Int"             
            set action accept
            set schedule "always"
                set service "ANY"             
            set logtraffic enable
            set nat enable
        next
     
     
    When I trace route any domian (yahoo.com) the first hop is the firewall external IP (wan ip),
    its not taking the VPN start-ip (192.168.1.241) to be the first hop, then the external wan ip as the next hop.
     
    wrathyimp
    wrathyimpAuthor
    New Member
    August 22, 2016
    I cannot connect to the 192.168.1.0 subnet, and I get the IP 192.168.1.241 from the VPN- ip range.
     
    
        
                                                
    
        
    
    
    

            
    
                                        
    
            
                        
    
                                                                                                            
            
    

    

    

        
    
                    
    
    
    
    

    

    
    
    

                                        
    
                                                        
    
            
        
    
    

    

    

                                    
    Terms & ConditionsAccessibility statement