ESR service routers. ESR-Series. Functionality description. Version 1.12.0
329
Solution:
Create an address profile that contains an address to be listened by the server:
esr# configure
esr(config)# object-group network pptp_outside
esr(config-object-group-network)# ip address-range
120.11
.
5.1
esr(config-object-group-network)# exit
Create address profile that contains local gateway address:
esr(config)# object-group network pptp_local
esr(config-object-group-network)# ip address-range
10.10
.
10.1
esr(config-object-group-network)# exit
Create address profile that contains client addresses:
esr(config)# object-group network pptp_remote
esr(config-object-group-network)# ip address-range
10.10
.
10.5
-
10.10
.
10.25
esr(config-object-group-network)# exit
Create PPTP server and map profiles listed above:
esr(config)# remote-access pptp remote-workers
esr(config-pptp)# local-address object-group pptp_local
esr(config-pptp)# remote-address object-group pptp_remote
esr(config-pptp)# outside-address object-group pptp_outside
esr(config-pptp)# dns-servers object-group pptp_dns
Select authentication method for PPTP server users:
esr(config-pptp)# authentication mode local
Specify security zone that user sessions will be related to:
esr(config-pptp)# security-zone VPN
Create PPTP users
Ivan
and
Fedor
for PPTP server:
esr(config-pptp)# username ivan
esr(config-pptp-user)# password ascii-text password1
esr(config-pptp-user)# enable
esr(config-pptp-user)# exit
esr(config-pptp)# username fedor
esr(config-pptp-user)# password ascii-text password2
esr(config-pptp-user)# enable
esr(config-pptp-user)# exit
esr(config-pptp)# exit