Presumably you have RFC addresses inside the Remote Office, therefore all
internal hosts are NAT Hideing behind the same public address.
UDP encapsulation on the clients will get this working. Be sure that the
NAT gateway in the remote office will pass this on port 2746.
It should not matter whether you get a static or dynamic IP address from
your ISP.
Beware, if you have multiple remote locations that they all use different
RFC address ranges. Otherwise you could end up with 2 clients using the
same address, which will result in neither of them working!
Julian
|---------+---------------------------------------------->
| | "Simon Spurrell, T-GR" |
| | <[EMAIL PROTECTED]> |
| | Sent by: Mailing list for |
| | discussion of Firewall-1 |
| | <[EMAIL PROTECTED]|
| | kpoint.com> |
| | |
| | |
| | 01/10/2002 09:26 |
| | Please respond to Mailing list for |
| | discussion of Firewall-1 |
| | |
|---------+---------------------------------------------->
>----------------------------------------------------------------------------------------------|
|
|
| To: [EMAIL PROTECTED]
|
| cc:
|
| Subject: [FW-1] Microsoft PPTP across address translation router
|
>----------------------------------------------------------------------------------------------|
I have the following situation:
A Remote Office with 1 to 4 users want to connect with laptop via PPTP
Remote Access VPN to a Microsoft PPTP VPN server.
Remote office have an Office Grade ADSL router with address translation.
One
dynamically assigned IP Address for the ADSL router.
In the main office we have a checkpoint firewall with a DMZ. The Microsoft
VPN server has one network card in the DMZ and one network card on the LAN.
We use the IP Address of the DMZ network card for the VPN tunnel
configuration on the clients.
The problem is only one (sometimes two) clients from the remote office are
able to connect to the Microsoft VPN server. If more than this try to
connect, one clients VPN tunnel is dropped.
I think it is a problem with the ADSL address translation router.
Has anyone had this problem before? When I called the ADSL company they
said, "this is the case because the ADSL router only has one internet
routable IP Address".
The ADSL ISP are able to give me one fixed IP on request. They might be
able
to replace the router. They are not able to give me a subnet of real IP's.
Could anyone advise.
Thanks.
Simon
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
________________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet.
**********************************************************************
Zenith Insurance Management Limited Registered No. 3805632
Registered @ Zenith House, Market Place, Haywards Heath,
West Sussex, RH16 1DB.
NOTICE:
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the [EMAIL PROTECTED] and delete the message
and any attachments accompanying it immediately.
**********************************************************************
________________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet.
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
