Example PPTP Range configuration

When using a RADIUS server for user authentication, PPTP and L2TP encryption is not supported and you should not select Require data encryption when configuring Windows clients for PPTP or L2TP.

Add the addresses from the PPTP address range to the external interface address list. The addresses can be grouped into an external address group.

Add the addresses to which PPTP users can connect to the internal interface. The addresses can be grouped into an address group.

Add an Ext ->Int policy to allow PPTP clients to connect through the DFL-500 NPG. Configure the policy as follows:

Source Destination

Service

Action

NAT

The address group that matches the PPTP address range.

The address to which PPTP users can connect.

The service that matches the traffic type inside the PPTP VPN tunnel. For example, if PPTP users can access a web server, select HTTP.

ACCEPT

Select NAT if address translation is required.

You can also configure traffic shaping, logging, and web filter settings for PPTP policies. For information about adding firewall policies, see Adding NAT/Route mode policies.

DFL-500 User Manual

68

 

Page 68
Image 68
D-Link DFL-500 user manual Example Pptp Range configuration, Source Destination Service Action