VPN PPTP-client connection to Server

[shpak1]

Dear Team,

I'm new with your product and previously some other guy installed Fortigate 30D device.

Currently we have 1 wan connection with PPPOE and 1 IPSec VPN connection to other Fortigate device.

I trying to setup extra VPN PPTP connection to some 3rd party VPN server to forward specific traffic through that connection.

config system interface
    edit "wan"
        set mode pppoe
        set allowaccess ping https fgfm
        set type physical
        set snmp-index 1
        set username "abcd"
        set password ENC lXFFP1SLc3RBTV/zV+1jx7PX6W9hwFXxQYdIekUjsupEpf17/e0mpktySmeaZutf2TdsKJV/IC3Q/MCch5180BiuOuJO1LziVLw0zwP0g7zglF8PMdtkb9soJWqu0XPBBpn6GevmJH4u1YumZEXTCw/gdkV9ZPchA82O8Snac4O5rRxfA2rzyFbVPnnoZtPQWHmXrw==
    next
    edit "modem"
        set mode pppoe
        set type physical
        set snmp-index 2
    next
    edit "ssl.root"
        set type tunnel
        set alias "SSL VPN interface"
        set snmp-index 5
    next
    edit "lan"
        set ip 192.168.10.1 255.255.255.0
        set allowaccess ping https ssh http fgfm capwap
        set type hard-switch
        set listen-forticlient-connection enable
        set snmp-index 6
    next
    edit "To_I"
        set type tunnel
        set snmp-index 3
        set interface "wan"
    next
end

Then i got some research and added pptp interface and failed...

FGT30D3X15015808 (pptp) # show
config system interface
    edit "pptp"
        set pptp-client enable
        set snmp-index 4
        set pptp-user "123456"
        set pptp-password ENC /L8/e+4H8yGE8aa1BdenVkXp0ZuKGd5jthMqCwpIPBihldCObZWG/qYCHwFJJCbbIsodFWLn7DgdugCoBaWdbyGbGFlo+n+RkMBppkfRep9vOK8Xd+7atxfdUsaVfFckVPKH8724IurxHBlIWcZekfxKtoR56L+tPnf/xUTpN3uwp7qAZ2xs6d/LsDlOku7xs9Z7jw==
        set pptp-server-ip x.x.x.x
        set pptp-auth-type mschapv2
        set pptp-timeout 200
        set interface "wan"
    next
end
 
FGT30D3X15015808 (pptp) # end
node_check_object fail! for vlanid 0
Attribute 'vlanid' value '0' checkingfail -158
Command fail. Return code -158

Please help me in that question.

[shpak1]

I have also option to use L2TP/IPsec, but also issue with configuration.

3rd day no result...

[stephen]

Did you find a resolution for this error?

[ede_pfau]

resurrecting this thread from the grave...I was hoping protocols like PPTP or L2TP were out-of-use nowadays.

The OP created a new interface - which needs to be in this form a VLAN interface. As he was not specifying a VLAN ID the config failed.

Actually, you put the PPTP config into the WAN facing interface config, for example wan1. That should work. Better still would be to put up an IPsec tunnel - more or less the same work, supported even by custom-grade home routers and way, way more secure.

[stephen]

Thanks.  So "set vlanid 1" under l2tp should do the trick.

You mention adding the l2tp settings to the wan interface.  I assume this will send everything through the tunnel?  If I want to send selective traffic through the tunnel then I will need to create a separate interface.

[ede_pfau]

I don't think that the interface config will determine the routing. But - I've never walked down that path, for good reasons. Just try it out for yourself and let us know.