Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Jul 1999 20:50:44 -0500
From:      "Jon Passki" <jon.passki@neicoltech.org>
To:        "Freebsd-Questions" <freebsd-questions@freebsd.org>
Subject:   NATD/IPFW and PPTP
Message-ID:  <001501bed31b$727e2540$c302a8c0@lp020001.neicoltech.org>

next in thread | raw e-mail | index | archive | help

Okay, I was able to make a connection today from a Win98 box to an NT server
running PPTP, with a FreeBSD box inbetween, running NATD and IPFW


<Win98>--<fxp0 FBSD 3.2 -S vx0>--<WinNT_40>

Win98 settings:
ip = 192.168.3.130
netmask = 255.255.0.0
gateway = 192.168.0.1

WinNT settings:
ip = 10.0.0.5
netmask = 255.0.0.0
gateway = 10.0.0.1

FreeBSD settings:

NATD:
natd -f /etc/natd.conf -v {verbose for testing, not needed for production}

/etc/natd.conf
redirect_address 10.0.0.5 192.168.0.4
interface fxp0
pptpalias 10.0.0.5

ifconfig fxp0
inet 192.168.2.48 netmask 0xffff0000 broadcast 192.168.255.255
inet 192.168.0.4 netmask 0xffff0000 broadcast 192.168.255.255

ifconfig vx0
inet 10.0.0.1 netmask 0xff000000 broadcast 10.255.255.255

IPFW list:
00100 divert 8668 ip from any to any via fxp0
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
65000 allow ip from any to any
65100 allow gre from any to any
65535 deny ip from any to any

I haven't seen if there are any superfluous settings, but this was enough to
make the 98 box authenicate to the nt box, and get assigned an IP on the VPN
adapter.

Jon Passki



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001501bed31b$727e2540$c302a8c0>