PPTP VPN Server - Revision history

Casey at 15:42, 16 December 2015

2015-12-16T15:42:10Z

Casey at 19:12, 26 November 2013

2013-11-26T19:12:49Z

Casey at 18:08, 26 November 2013

2013-11-26T18:08:43Z

Casey: Created page with "A Cisco router can be configured as a PPTP VPN server. This is very handy, because a PPTP client is built into most operating systems, like Windows, Linux and Android. For s..."

2013-11-26T17:25:45Z

Created page with "A Cisco router can be configured as a PPTP VPN server. This is very handy, because a PPTP client is built into most operating systems, like Windows, Linux and Android. For s..."

New page

A Cisco router can be configured as a PPTP VPN server. This is very handy, because a PPTP client is built into most operating systems, like Windows, Linux and Android.

For starters, you will need some users created. The VPN authentication mechanism can't use secret passwords, so you can only use type 7 or plaintext. It might work with external authentication like TACACS+ or RADIUS, but I haven't tried it.

<PRE>
username vpnuser password vpnpassword
</PRE>

Next, enable Virtual Private Dialup Networking (VPDN). When a user connects, they will be brought up on an interface created from the Virtual-Template interface.

<PRE>
vpdn enable
!
vpdn-group 1
description PPTP VPN
accept-dialin
protocol pptp
virtual-template 1
</PRE>

interface Virtual-Template1
description PPTP VPN
no ip dhcp client request router
! name of the LAN interface below
ip unnumbered FastEthernet0
no ip redirects
ip nat inside
ip virtual-reassembly
ip route-cache flow
no logging event link-status
peer default ip address pool PPTP-POOL
keepalive 30
ppp encrypt mppe 40
ppp authentication pap chap ms-chap
!
ip local pool PPTP-POOL 192.168.10.230 192.168.10.234

@@ Line 3: / Line 3: @@
 ==User Config==
-For starters, you will need some users created.  The VPN authentication mechanism can't use secret passwords, so you can only use type 7 or plaintext.  It might work with external authentication like TACACS+ or RADIUS, but I haven't tried it.
+For starters, you will need some users created.  You can either use local accounts or external authentication.
 <PRE>
 username vpnuser password vpnpassword
 </PRE>

← Older revision		Revision as of 19:12, 26 November 2013
Line 66:		Line 66:
	peer default ip address dhcp-pool PPTP-VPN		peer default ip address dhcp-pool PPTP-VPN
	</PRE>		</PRE>
		+
		+
		+	==Client Setup==
		+	In Windows, the only change that might be necessary in the client is to disable using the default gateway from the network. It should get it's DNS servers and any static routes from PPTP.
		+
		+	Ubuntu doesn't seem to get the DNS servers from DHCP (maybe it uses another option), so you're best off configuring the connection for "Get addresses only", then manually specifying the DNS server IP(s).

@@ Line 1: / Line 1: @@
 A Cisco router can be configured as a PPTP VPN server.  This is very handy, because a PPTP client is built into most operating systems, like Windows, Linux and Android.
 For starters, you will need some users created.  The VPN authentication mechanism can't use secret passwords, so you can only use type 7 or plaintext.  It might work with external authentication like TACACS+ or RADIUS, but I haven't tried it.
@@ Line 7: / Line 9: @@
 </PRE>
 Next, enable Virtual Private Dialup Networking (VPDN).  When a user connects, they will be brought up on an interface created from the Virtual-Template interface.
 <PRE>
@@ Line 20: / Line 24: @@
 interface Virtual-Template1
   description PPTP VPN
   ip unnumbered FastEthernet0
   ip nat inside
   no logging event link-status
   keepalive 30
-  ppp encrypt mppe 40
+  ppp encrypt mppe 128 required
-  ppp authentication pap chap ms-chap
+  ppp authentication ms-chap-v2
+</PRE>
 ip local pool PPTP-POOL 192.168.10.230 192.168.10.234