Watchguard Firebox X20E, User Manual

Page: 239 / 310

User Guide 227
Configuring PPTP Mobile User VPN
3
To enable PPTP, select the Activate remote user VPN with PPTP check box.
4
Select the Enable drop from 128-bit to 40-bit check box to allow the tunnels to drop from 128-
bit to 40-bit encryption for connections that are less reliable. The Firebox X Edge always tries to
use 128-bit encryption first. It uses 40-bit encryption if the client cannot use the 128-bit
encrypted connection. Usually, only customers outside the United States use this check box.
5
Select the Log all allowed PPTP traffic to have the Edge record a log message for all PPTP
traffic.
6
When a PPTP user connects to the Edge, the Edge must assign that user’s computer an available
IP address from the network the user wants to connect to. Type the first IP address in the address
pool the Edge can use to assign PPTP user IP addresses in the
Start of IP address pool field. The
Edge gives out this IP address to the first PPTP user that connects. The Edge increments the IP
address by 1 and assigns an address to each subsequent PPTP user that connects (up to 10
users).
The IP address that you set as the start of the IP address pool must be the first of ten sequential IP
addresses available and identified on your Edge as part of the trusted or optional network.
Configuring DNS and WINS settings
The Domain Name Service (DNS) changes host names into IP addresses. WINS changes NetBIOS names
to IP addresses. By default, PPTP users that connect to the Edge use the WINS and DNS servers identi-
fied on the
Network > Trusted page of your Edge configuration.
If you want to specify a different WINS or DNS server, add it in the DNS Server and WINS Server IP
Address text boxes near the bottom of the Mobile User page.