|
| |
Netopia - VPN to VPN Tunnel Using PPTP
Router A Configuration
- From the Main Menu of router console screens, go to Quick Menus,
and select Add Connection Profile.
- Under Profile Name, type Router B (or a name of your
choice).
- Change Data Link Encapsulation to PPTP and select Data
Link Options.
- Enter the PPTP Partner IP Address. (Note: This is
the public IP address of Router B. Considering our example, the
public IP address, or Local WAN IP Address, is 172.20.17.1. If the
opposite router in your configuration does not have NAT enabled for the
Internet connection profile, and IP Addressing... in Easy Setup
is set for an Unnumbered connection to the Internet, the Ethernet
IP Address should be used at the PPTP Partner IP Address
instead.)
- Next, set an Authentication type for the tunnel. If you wish to
use encryption, you must choose MS-CHAP. You will have the option to
use MPPE or None as your Data Encryption type. MPPE
provides both compression and a greater level of security through
encryption. However, it will slow down data transmission.
- If you choose either PAP or CHAP as your authentication
type, you may choose to use Data Compression. You have a choice of
None or Standard LZS.
- If Router A will be initiating PPTP connections to Router B,
enter a unique Send Host Name and Send Password (or Secret)
and set Initiate Connections to Yes.
- If Router B will be initiating PPTP connections to Router A,
enter a unique Receive Host Name and Receive Password (or
Secret).
- If you want Router A to initiate a PPTP connections to Router
B whenever there is a demand for resources on the Router B
network, as opposed to manually establishing a connection from the router
every time, set On Demand to Yes.
- Idle Timeout is the amount of time Router A will maintain
the PPTP connection to Router B when there is no traffic. It is 300
seconds by default. A value of zero disables the idle timer so the PPTP
connection will never time out.
- Escape once back to the Add Connection Profile screen.
- IP Enabled should be set to Yes. Next, select IP
Profile Parameters.
- Set Address Translation Enabled to No.(Note:
Use the tab key to toggle this option between Yes and No. Hit enter to save
your changes).
- Set the Remote IP Address to 192.168.2.1 and Remote IP Mask
to 255.255.255.0. (Note: In your case, if Router B has
a different Ethernet IP Address and Ethernet Subnet Mask then
what is used in this example, please substitute your own Ethernet IP
Information for Router B.)
- Do not select a Filter Set. If one is active, hit enter on
Remove Filter Set to deactivate it. (Note: You can filter
over a PPTP connection, however, none of the pre-set filters are suitable
for this purpose. If you wish to filter traffic on your PPTP tunnel, please
read technote
NIR
052: Basic Firewall Features and Configuration.)
- Receive RIP should be set to Off unless you have multiple
RIP-enabled routers on either the Router A or Router B
network.
- Escape once to return to the Add Connection Profile screen and
select Add Profile Now.
- From the Connection Profiles screen, escape once back to Quick
Menus.
- Select ATMP/PPTP Default Profile (Firmware versions below 4.8
select VPN Default Answer Profile).
- Set Answer ATMP/PPTP Connections: to Yes (Firmware
versions below 4.8 set Answer VPN Connections: to Yes).
- Under PPTP Configuration Options, select the Receive
Authentication type you are using. This will be the same as the
Authentication type you selected in Data Link Options.
- Escape once back to Quick Menus.
- Select WAN Default Profile.
- Set Must Match a Defined Profile to Yes.
Note: The R9100 and the R910 may not have a
Wan Default Profile. Simply disregard this step.
- Escape twice out to the Main Menu and go to Utilities and Diagnostics.
- Select Restart System. This concludes the setup for Router A.
Router B Configuration
- From the Main Menu of router console screens, go to Quick Menus,
and select Add Connection Profile.
- Under Profile Name, type Router A (or a name of your
choice).
- Change Data Link Encapsulation to PPTP and select Data
Link Options.
- Enter the PPTP Partner IP Address. (Note: This is
the public IP address of Router A. Considering our example, the
public IP address, or Local WAN IP Address, is 172.20.16.1. If the
opposite router in your configuration does not have NAT enabled for the
Internet connection profile, and IP Addressing... in Easy Setup
is set for an Unnumbered connection to the Internet, the Ethernet
IP Address should be used at the PPTP Partner IP Address
instead.)
- Next, select the same Authentication type as you did in Router
A for the Router B profile.
- Also, select the same Data Compression or Data Encryption
type as you set in Router A for the Router B profile.
- If Router B will be initiating PPTP connections to Router A,
enter the same values you configured in Router A for Receive Host
Name and Receive Password (or Secret) as the Send Host
Name and Send Password (or Secret) here, in Router B.
Set Initiate Connections to Yes.
- If Router A will be initiating PPTP connections to Router B,
(Initiate Connections must be set to Yes in the Router B
profile of Router A), enter the same values you configured in
Router A for Send Host Name and Send Password (or
Secret) as the Receive Host Name and Receive Password (or
Secret) here, in Router B.
- If you want Router B to initiate a PPTP tunnel to Router A
whenever there is a demand for resources on the Router A network, as
opposed to manually establishing a connection from the router every time,
set On Demand to Yes.
- Again, Idle Timeout is the amount of time Router B will
maintain the PPTP connection to Router A when there is no traffic. It
is 300 seconds by default. A value of zero disables the idle timer so the
PPTP connection will never time out.
- Escape once back to the Add Connection Profile screen.
- IP Enabled should be set to Yes. Next, select IP
Profile Parameters.
- Set Address Translation Enabled to No.
- Set the Remote IP Address to 192.168.1.1 and Remote IP Mask
to 255.255.255.0. (Note: In your case, if Router A has
a different Ethernet IP Address and Ethernet Subnet Mask then
what is used in this example, please substitute your own Ethernet IP
Information for Router A.)
- Do not select a Filter Set. If one is active, hit enter on
Remove Filter Set to deactivate it. (Note: You can filter
over a PPTP connection, however, none of the pre-set filters are suitable
for this purpose. If you wish to filter traffic on your PPTP tunnel, please
read technote
NIR
052: Basic Firewall Features and Configuration.)
- Receive RIP should be set to Off unless you have multiple
RIP-enabled routers on either the Router B or Router A
network.
- Escape once to return to the Add Connection Profile screen and
select Add Profile Now.
- From the Connection Profiles screen, escape once back to Quick
Menus.
- Select ATMP/PPTP Default Profile (Firmware versions below 4.8
select VPN Default Answer Profile).
- Set Answer ATMP/PPTP Connections: to Yes (Firmware
versions below 4.8 set Answer VPN Connections: to Yes).
- Under PPTP Configuration Options, select the Receive
Authentication type you are using. This will be the same as the
Authentication type you selected in Data Link Options.
- Escape once back to Quick Menus.
- Select WAN Default Profile.
- Set Must Match a Defined Profile to Yes.
Note: The R9100 and the R910 may not have a
Wan Default Profile. Simply disregard this step.
- Escape twice out to the Main Menu and go to Utilities and Diagnostics.
- Select Restart System. This concludes the setup for Router B.
Conclusion
Once both routers are configured, a PPTP connection can be established to
allow IP routing through the tunnel between the two LAN's.
|
