Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
wrathyimp
New Contributor

PPTP default gateway

Hi,

 

I have configured the PPTP and able to connect and access the firewall, but can't connect to any of the servers.

config vpn pptp
    set eip 192.168.1.248
    set sip 192.168.1.241
    set status enable
    set usrgrp "VPN"
end

And my PC ipconfig show "default gateway 0.0.0.0"

 

So any firewall policies to be added to pass the traffic to the servers.

3 REPLIES 3
jintrah_FTNT
Staff
Staff

Hi,

 

Please follow the steps in http://kb.fortinet.com/kb...&externalId=100112

wrathyimp

Yes I did follow this article and created the policy

 

    edit "VPN-Users"
        set type iprange
        set end-ip 192.168.1.248
        set start-ip 192.168.1.241
    next

 

 

config vpn pptp
    set eip 192.168.1.248
    set sip 192.168.1.241
    set status enable
    set usrgrp "VPN"
end

 

 

    edit 9
        set srcintf "external"
        set dstintf "internal"
            set srcaddr "VPN-Users"             
            set dstaddr "all"             
        set action accept
        set schedule "always"
            set service "ANY"             
        set logtraffic enable
    next

This Polciy to give VPN users internet access.

    edit 10
        set srcintf "external"
        set dstintf "external"
            set srcaddr "VPN-Users"             
            set dstaddr "WAN1_Int"             
        set action accept
        set schedule "always"
            set service "ANY"             
        set logtraffic enable
        set nat enable
    next

 

When I trace route any domian (yahoo.com) the first hop is the firewall external IP (wan ip),

its not taking the VPN start-ip (192.168.1.241) to be the first hop, then the external wan ip as the next hop.

 

wrathyimp

I cannot connect to the 192.168.1.0 subnet, and I get the IP 192.168.1.241 from the VPN- ip range.

 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors