tags: apache   archive   business   charity   climbing   comic   communication   database   email   exchange   family   fm2008   hack   hardware   humour   linux   liverpool   microsoft   money   mysql   network   oes   opensource   outlook   php   pictures   process   project   quote   real_life   review   rss   science   security   software   thought   tsm   updates   webdev   website   windows  

Watchguard PPTP passthrough

Thu, 20 Dec 2007 04:13:56

I'm looking into giving my readers a Christmas present, an album or something similar. Just finalising the talks with the distributor at the moment so stay tuned (Christmas present was uploaded and later removed to comply with copywrite regulations, those of you who managed to download it, which there were many, hope you enjoyed, cheers). On a more technical note, I'd like to detail how to configure a watchguard firewall for PPTP pass through in under 60 seconds. We assume you have a Microsoft RRAS server doing the PPTP authentication behind the firewall. Lets do it.

  • You'll need three static IPs, one for router, one for firewall, one for 1-1 NAT.
  • We assume you've already got the firewall and router setup correctly
  • Find the one to one NAT configuration area (differs on versions) and enter the public IP you'll use for VPN and the private IP of the RRAS server
  • Add a new rule in your policy, PPTP and add 'ANY' to [FROM] and the private address of the RRAS server to [TO] - do not use NAT here, we've already set that up
  • You're done. Test away and remember, logs are your friend.
    Ryan Partington