Hi,
I have configured the PPTP and able to connect and access the firewall, but can't connect to any of the servers.
config vpn pptp
set eip 192.168.1.248
set sip 192.168.1.241
set status enable
set usrgrp "VPN"
end
And my PC ipconfig show "default gateway 0.0.0.0"
So any firewall policies to be added to pass the traffic to the servers.
Yes I did follow this article and created the policy
    edit "VPN-Users"
        set type iprange
        set end-ip 192.168.1.248
        set start-ip 192.168.1.241
    next
config vpn pptp
    set eip 192.168.1.248
    set sip 192.168.1.241
    set status enable
    set usrgrp "VPN"
end
    edit 9
        set srcintf "external"
        set dstintf "internal"
            set srcaddr "VPN-Users"             
            set dstaddr "all"             
        set action accept
        set schedule "always"
            set service "ANY"             
        set logtraffic enable
    next
This Polciy to give VPN users internet access.
    edit 10
        set srcintf "external"
        set dstintf "external"
            set srcaddr "VPN-Users"             
            set dstaddr "WAN1_Int"             
        set action accept
        set schedule "always"
            set service "ANY"             
        set logtraffic enable
        set nat enable
    next
When I trace route any domian (yahoo.com) the first hop is the firewall external IP (wan ip),
its not taking the VPN start-ip (192.168.1.241) to be the first hop, then the external wan ip as the next hop.
I cannot connect to the 192.168.1.0 subnet, and I get the IP 192.168.1.241 from the VPN- ip range.
| User | Count | 
|---|---|
| 2727 | |
| 1417 | |
| 810 | |
| 738 | |
| 455 | 
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.