D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: zsun on August 20, 2009, 12:37:58 AM

Title: DFL800- PPTP VPN Problem - SOLVED
Post by: zsun on August 20, 2009, 12:37:58 AM

Hi,

I need to configure a PPTP VPN.

The connection runs fine but I can not access my LAN. (no ping, no rdp...)

Here are the rule

Name          Action  SRCif             SRCNet     Destif     Dest Net         Services
pptpallow1   Allow    pptpserver1    pptp1        lan         lan_ip          all_services

Here are the LOGS
(http://www.monsterup.com/upload/1250753843795.jpg) (http://www.monsterup.com)

Thanks you

Title: Re: DFL800- PPTP VPN Problem
Post by: Fatman on August 20, 2009, 08:52:41 AM

One can't be positive without knowing what is underneath the grey there, but I can say the below two statements with the near certainty it will fix your issue.

If your using a routed connection (like a PPTP tunnel) whose network is contained within an existing route then you will need to use proxy ARP.  Translation (for your environment), use proxy ARP on the PPTP server if it's PPTP Pool falls within the LAN Net.

"Default Rule" means you have insufficient IP Rules, "Default Access Rule" means you have insufficient routes.

Title: Re: DFL800- PPTP VPN Problem
Post by: Fatman on August 20, 2009, 08:58:03 AM

I wrote that without reading all of your post properly, while it is true, it is not your issue.  Your IP Rule should match the below.

Name          Action  SRCif             SRCNet     Destif     Dest Net         Services
pptpallow1   Allow    pptpserver1    pptp-pool  lan         lan_net         all_services

And if you are going to have any LAN->PPTP traffic the below would help with that.

Name          Action  SRCif     SRCNet     Destif           Dest Net         Services
pptpallow1   Allow    lan        lan_net    pptpserver1   pptp-pool        all_services

Title: Re: DFL800- PPTP VPN Problem
Post by: zsun on August 20, 2009, 11:29:13 AM

Hello,

Thanks you, all works!


Best regards