D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: Robotika12 on June 13, 2012, 06:22:04 AM

Title: DFL-210, Two ISP's, one on WAN, one on DMZ, can I have PPTP on both WAN & DMZ?
Post by: Robotika12 on June 13, 2012, 06:22:04 AM

Hello,

Hoping someone can steer me right here.
I have a DFL-210.  I have two ISP's connected to the WAN port and DMZ port.
I have basic static routing rules that split traffic across the ISP's.

Currently inbound PPTP VPN connections work on the WAN port ie  connecting from the internet to the internal network.

I'd like to have inbound PPTP VPN connections also on the DMZ port.  Is this possible?

thanks,
Stuart

Title: Re: DFL-210, Two ISP's, one on WAN, one on DMZ, can I have PPTP on both WAN & DMZ?
Post by: chechito on June 13, 2012, 02:39:33 PM

same situation like this:

http://forums.dlink.com/index.php?topic=48379.msg178632#msg178632 (http://forums.dlink.com/index.php?topic=48379.msg178632#msg178632)

Title: Re: DFL-210, Two ISP's, one on WAN, one on DMZ, can I have PPTP on both WAN & DMZ?
Post by: Robotika12 on June 14, 2012, 04:45:09 AM

thanks for the response.

I read that post.
PPTP/VPN connections are different tho aren't they?
The manual says PPTP connections are considered to be their own interface  (you have to create the interface in the interface list).

So this complicates the routing?

I thought also, from what I read in the manual that when the PPTP interface is established, a dynamic route gets entered in the routing table for that interface  (I can see this from working PPTP connection on WAN).

Title: Re: DFL-210, Two ISP's, one on WAN, one on DMZ, can I have PPTP on both WAN & DMZ?
Post by: chechito on June 17, 2012, 09:51:02 AM

when you create a pptp server interface you have to specify an outer (physical ppop or vlan) interface and pptp server outer ip address on that interface.

because that maybe its necessary to create a pptp server for each outer interface.

i always create a different pptp server interface whit their respective address poll and user database, but its interesting to test if pptp servers can share addressing and user database, in that way you take advantage of redundancy transparently to the connecting user without changing any on the user

Title: Re: DFL-210, Two ISP's, one on WAN, one on DMZ, can I have PPTP on both WAN & DMZ?
Post by: thasteve on June 17, 2012, 11:46:04 PM

you can share the address pool and user database thats how i have it set up and its working