FortiGate Administration Guide - FirewallShop.com

VPN PPTP
PPTP Range
VPN PPTP
FortiGate units support PPTP to tunnel PPP traffic between two VPN peers.
Windows or Linux PPTP clients can establish a PPTP tunnel with a FortiGate unit
that has been configured to act as a PPTP server. As an alternative, you can
configure the FortiGate unit to forward PPTP packets to a PPTP server on the
network behind the FortiGate unit.
PPTP VPN is available only in NAT/Route mode.The current maximum number of
PPTP and L2TP sessions is 254. The start and end IPs must be in the same 24-
bit subnet, e.g. x.x.x.1. - x.x.x.254.
This section explains how to use the web-based manager to specify a range of IP
addresses for PPTP clients. For information about how to perform other related
PPTP VPN setup tasks, see the FortiGate PPTP VPN User Guide.
This section describes:
• PPTP Range
PPTP Range
You can specify a PPTP address range on the PPTP Range page. The PPTP
address range is the range of addresses reserved for remote PPTP clients. When
the remote PPTP client connects, the FortiGate unit assigns an IP address from a
reserved range of IP addresses to the client PPTP interface. The PPTP client
uses the assigned IP address as its source address for the duration of the
connection.
To enable PPTP and specify the PPTP address range, go to VPN > PPTP >
PPTP Range, select the required options, and then select Apply.
Figure 232:Edit PPTP range
Enable PPTP
Starting IP
Ending IP
User Group
Disable PPTP
Select the option. You must add a user group before you can select the
option. See “User groups” on page 386.
Type the starting address in the range of reserved IP addresses.
Type the ending address in the range of reserved IP addresses.
Select the name of the PPTP user group that you defined.
Select the option to disable PPTP support.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 361