Watchguard PPTP passthrough
I'm looking into giving my readers a Christmas present, an album or something similar. Just finalising the talks with the distributor at the moment so stay tuned (Christmas present was uploaded and later removed to comply with copywrite regulations, those of you who managed to download it, which there were many, hope you enjoyed, cheers). On a more technical note, I'd like to detail how to configure a watchguard firewall for PPTP pass through in under 60 seconds. We assume you have a Microsoft RRAS server doing the PPTP authentication behind the firewall. Lets do it.
- You'll need three static IPs, one for router, one for firewall, one for 1-1 NAT.
- We assume you've already got the firewall and router setup correctly
- Find the one to one NAT configuration area (differs on versions) and enter the public IP you'll use for VPN and the private IP of the RRAS server
- Add a new rule in your policy, PPTP and add 'ANY' to [FROM] and the private address of the RRAS server to [TO] - do not use NAT here, we've already set that up
You're done. Test away and remember, logs are your friend.
Ryan Partington


