topic Re: pptp VPN to Proxy ARP IP from outside. in General Topics

pptp VPN to Proxy ARP IP from outside.

Yaroslav_Basenk — Thu, 25 Jul 2019 12:58:32 GMT

Hi All,

I tryed to pass pptp vpn through the CP (80.20) from outside use Proxy ARP IP-address. I mean chain Internet --> ProxyARP+HA Cluster--> Internal PPTP server. In logs I see accepted GRE traffic but connection from Internal PPTP server --> External client NATed by cluster external IP and not by IP which I need. And of course pptp connection do not establish in this case. Can CP use Proxy ARP ip addresses for GRE passthrough?
P/S Then I try use cluster IP for publictation this pptp server all works correctly.

Re: pptp VPN to Proxy ARP IP from outside.

PhoneBoy — Fri, 26 Jul 2019 02:11:05 GMT

What NAT rules do you have configured here?
Also it seems weird you are seeing traffic originating from the cluster IP.
Might be worth a TAC case.

Re: pptp VPN to Proxy ARP IP from outside.

Yaroslav_Basenk — Fri, 26 Jul 2019 06:54:51 GMT

I see NATed gre in the Smart console (screenshot attached).

As I understand it, I have to have a NAT rule for GRE, but I cannot create NAT exactly for the GRE protocol (very funny). So all I found is to create a NAT rule with ANY in the source service column and Original in the Translated services column. This is not very convenient if I have several rules for this address.Maybe is there a way to create a NAT rule for the GRE and not for ANY?

Re: pptp VPN to Proxy ARP IP from outside.

Yaroslav_Basenk — Fri, 26 Jul 2019 06:59:05 GMT

Created NAT rule

Re: pptp VPN to Proxy ARP IP from outside.

PhoneBoy — Fri, 26 Jul 2019 17:33:30 GMT

The NAT rulebase only allows you to use TCP or UDP services in the service column.
To do any other IP protocol like GRE, you must use "Any" in the rulebase.