Fortinet Gate 60D, Руководство администратора

Страница: 547 / 706

PPTP VPN PPTP configuration using FortiGate web-based manager
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
547
http://docs.fortinet.com/ • Feedback
PPTP VPN
FortiGate units support PPTP to tunnel PPP traffic between two VPN peers. Windows or
Linux PPTP clients can establish a PPTP tunnel with a FortiGate unit that has been
configured to act as a PPTP server. As an alternative, you can configure the FortiGate unit
to forward PPTP packets to a PPTP server on the network behind the FortiGate unit.
PPTP VPN is available only in NAT/Route mode. The current maximum number of PPTP
sessions is 254. If you enable virtual domains (VDOMs) on the FortiGate unit, you need to
configure VPN PPTP separately for each virtual domain. For more information, see
“Using
virtual domains” on page 103 .
When you intend to use the FortiGate unit as a PPTP gateway, you can select a PPTP
client IP from a local address range or use the server defined in the PPTP user group. You
select which method to use for IP address retrieval and, in the case of the user group
server, provide the IP address and the user group.
This section explains how to specify a range of IP addresses for PPTP clients or configure
the PPTP client-side IP address to be used in the tunnel setup. For information about how
to perform other related PPTP VPN setup tasks, see the
FortiGate PPTP VPN User
Guide .
This section describes:
• PPTP configuration using FortiGate web-based manager
• PPTP configuration using CLI commands
PPTP configuration using FortiGate web-based manager
To configure the PPTP tunnel, create a customized screen in the web-based manager.
The
PPTP Range tab is found under the Categories heading as a selection in the
Additional category:
Note: The PPTP feature is disabled by default in the FortiGate web-based manager. You
configure the PPTP tunnel configuration by creating a customized FortiGate screen.