A PPTP server is configured on Syneto UTM using the command line interface:
[root@gw]# config pptp
Usage:
PPTP Server Control
config pptp enable - Start PPTP server
config pptp disable - Stop PPTP server
config pptp show - Show parameters and users.
PPTP Server Configuration
config pptp bcrelay [interface1] - Enable broadcast relay.
config pptp proxyarp [enable|disable] - Enable/disable proxy ARP.
config pptp localip - Range of IPs for this firewall.
config pptp remoteip - Range of IPs for clients.
config pptp dns - DNS server to send to client
config pptp defaultroute [enable|disable] - Set default route
PPTP Server User Management
config pptp user add - Add PPTP user.
config pptp user del - Delete PPTP user.
config pptp user passwd - Change password for PPTP user
Server Configuration
- localip - Represents an IP address or a range of IP addresses that will be configured on the local endpoint of the tunnel.
- remoteip - Represents a range of IP addresses that will be given to each client after it connects successfully.
- bcrelay - Turns on broadcast relay mode, sending all broadcasts received on the server's internal interface to the clients.
- proxyarp - Turns on proxy arp, sending all ARP packets received on the server's internal interface to the clients. This will create the illusion that the clients connected via PPTP are on the same phyisical network as the internal clients.
- dns - DNS server to send to clients.
- defaultroute - configure this server to change its default route via the connected client. Do not enable this unless you are creating a site-to-site pptp connection (not described in this document).
Note: localip and remoteip may be a list of IP addresses (for example 192.168.0.2,192.168.0.3), a range (for example 192.168.0.1-254 or 192.168.0-255.2) or some combination (for example 192.168.0.2,192.168.0.5-8).
User Management
PPTP users are kept in a local databases managed by the config pptp user command. In the future this will also allow for alternative forms of authentication such as Radius.
Server Control
You can configure the PPTP server before deciding to start it up or decide to stop it temporarily to deny all PPTP accesses to the server. Using the commands config pptp enable and config pptp disable you will be able to start and stop all PPTP connections.
