PPTP client behind FW-1

[aafaqm]

I want to create a rulebase that allows PPTP clients using Windows NT 4.0 Workstation SP6 to go through the firewall and connect to server.


Thanks,
Aafaq

 

[Goyle]

First step is to set up a network object for the client you wish to connect to offsite. Then each NT client will need to be set up with it's own static address and then put into a group on the Firewall. Then a to and a from must be set up. Such as NTClientGroup--->OFFSiteVPN allow pptppackage. and vice-versa OFFsiteVPN ----> NTClientGroup allow pptppackage. You will also need to edit the route table to pass those packets directly to your nt clients. I have noticed problems when more than three people try to connect offsite it seems that no more than three can pass through the firewall. I have posted here asking about this but no one has answered. If you see a solution please let me know.