PPTP Server Configuration

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 18:42, 25 June 2006 (edit)
24.63.127.239 (Talk)
(Troubleshooting)
← Previous diff
Revision as of 18:45, 25 June 2006 (edit) (undo)
24.63.127.239 (Talk)
(Troubleshooting)
Next diff →
Line 61: Line 61:
== Troubleshooting == == Troubleshooting ==
-* In order to get this to work it's essential to disable "loopback" otherwise it doesn't work (loopback was enabled as default in my firmware version (v.23 std)! ''Note: Using V23SP1-VOIP 6/5/06, PPTP Server was verified working even with "loopback" enabled (http://www.dd-wrt.com/wiki/index.php/User:pagedude 6/25/06)''+* In order to get this to work it's essential to disable "loopback" otherwise it doesn't work (loopback was enabled as default in my firmware version (v.23 std)! ''Note: Using V23SP1-VOIP 6/5/06, PPTP Server was verified working even with "loopback" enabled ([http://www.dd-wrt.com/phpBB2/profile.php?mode=viewprofile&u=810 pagedude] 6/25/06)''
* check passwords (chap-secrets file) for special characters ( # - Character in password breaks pptp) ...the admin password of the router is inserted into chap-secrets by default! --[[User:Krikkit|Krikkit]] 12:12, 7 Mar 2006 (CET) * check passwords (chap-secrets file) for special characters ( # - Character in password breaks pptp) ...the admin password of the router is inserted into chap-secrets by default! --[[User:Krikkit|Krikkit]] 12:12, 7 Mar 2006 (CET)
* Another issue in v.23 is that outgoing pptp-trafic cannot pass-through the router with pptp-server enabled. There is a fairly complicated fix for this issue in the dd-wrt forum. [edit] * Another issue in v.23 is that outgoing pptp-trafic cannot pass-through the router with pptp-server enabled. There is a fairly complicated fix for this issue in the dd-wrt forum. [edit]

Revision as of 18:45, 25 June 2006

This is a configuration guide to get a "PPTP Server" working on WRT54G/GS DD-WRT V2.3

A Little Brief : A PPTP Server let's us get connected securely from our home to the Office LAN, so you can use the services provided in your office at the confort of your home.

I'm using version DD-WRT 2.3 "VOIP" on WRT54GS router

  1. The first step in the configuration is to have flashed our WRT54G/GS with the "RIGHT" fimware, once you be sure about firmware , you have to go to the WEB Administration Page (http://ip_of_router), log on and go to the "ADMINISTRATION" tab, once you get there, do a click on "SERVICES" tab.
  2. Go down and you will see "PPTP Server" by default is "Disabled" you must "ENABLE" and go to the botton of the page and click on "Save Settings"
  3. The next thing you will see, is the message "Settings Are Successful" click on "Continue".
  4. Again in the tab "Services", go down , and you will see a few options under PPTP Server...

you have to complete the options in order to get PPTP server working,

Complete the options as follows:

PPTP Server = Enabled (this runs the service)

Server IP = here you have to write your LAN IP Address. Example: Server IP = 192.168.1.1

Client IP(s)= here you have to write the "clients" ip addresses range, this is used to give the clients, who are trying to connect, a valid ip address on the LAN segment of the network

 Example: 192.168.1.100-120 (21 clients allowed)

CHAP-Secrets = Here you have to write the "Usernames" and "Passwords" that you want to assign to clients. Pay close attention to the use of spaces and asterisks between usernames and passwords, authentication will not work without them.

General Syntax:

Username * Password *
username_to_use,blank space,asterisk,blank space,password_to_use,blank space,asterisk 

Example:

fernando * bissio *
marcelo * semino *
eduardo * crea *

Do NOT forget of spaces between asterisk and usernames/passwords, if not, it will not work.

Once you have completed the data input go down an click on "Save Settings" to save changes, now on the page "Settings Are Succesfull" click on "Continue" and again on "SERVICES" tab, where you doublecheck the values of your PPTP server.

5) Finally, go down, and click on "REBOOT ROUTER", this step is very important, no mather what you have configured, if you dont reboot router, settings will not work.

Now you only have to get a Windows BOX in the internet, create a new VPN connection and try to connect to the linksys as the "PPTP Server", be carefully , test must be done FROM the internet to hit the WAN port of the router, if you try to connect from the inside of your LAN, it will not work.

If you have any questions do not hesitate to contact me m_semino@hotmail.com

Important Advice: I DO NOT have any relation with DD-WRT, I love their work, but at this moment i'm a user, just like you...


If using the VPN connection software built into Windows XP, you might find that your internet connection will die once the vpn connection is established. This is a result of the default settings for Windows XP VPN connections. To fix this, do the following:

 Click Start
 Go to the Control Panel
 Go to Network Connections
 Right click your VPN connection and select properties
 Go to the networking tab and double-click TCP/IP
 Click the Advanced button on the window that opens
 Uncheck the box titled "Use the default gateway of the remote network

Hit ok on all related windows so that your changes are saved.



Troubleshooting

  • In order to get this to work it's essential to disable "loopback" otherwise it doesn't work (loopback was enabled as default in my firmware version (v.23 std)! Note: Using V23SP1-VOIP 6/5/06, PPTP Server was verified working even with "loopback" enabled (pagedude 6/25/06)
  • check passwords (chap-secrets file) for special characters ( # - Character in password breaks pptp) ...the admin password of the router is inserted into chap-secrets by default! --Krikkit 12:12, 7 Mar 2006 (CET)
  • Another issue in v.23 is that outgoing pptp-trafic cannot pass-through the router with pptp-server enabled. There is a fairly complicated fix for this issue in the dd-wrt forum. [edit]
  • DMZ must be DISABLED in order to work --ptodic 21:36, 8 Mar 2006 (CET)
  • If your unable to connect to the PPTP server or can occasionally but not for more than a few minutes at a time, and you use a WAN device that does PPPoE onboard (Like a SpeedStream 5100b DSL Modem) -- You may have to disable the onboard PPPoE and use the PPPoE on the WRT54G. What happens is the GRE thats needed for PPTP sometimes gets messed up by your WAN device, probably because it uses a buggy layer 3 stack that corrupts or doesn't pass the GRE packets to your WRT.
  • server ip is the router's LAN ip -eg. 192.168.1.1

PPTP security

Since PPTP is broken and deprecated should it not be noted on the PPTP related pages that users should stay away from this? article about PPTP security. For alternative, see OpenVPN.

DNS issues

Your client may not get the correct DNS setting. To correct this do the following.

To permanently set the WINS/DNS values for the PPTP server that assigned to the client, you can set/commit the following nvram params:

Code:

  nvram set pptpd_dns1=ip-address-of-first-dns-server 
  nvram set pptpd_dns2=ip-address-of-second-dns-server 
  nvram set pptpd_wins1=ip-address-of-first-wins-server 
  nvram set pptpd_wins2=ip-address-of-second-wins-server 

Example: To have the PPTP server give out a wins/netBios address of "10.0.0.5", you would type the following in a SSH/telnet session into the router:

Code:

  nvram set pptpd_wins1=10.0.0.5 
  nvram commit 
  reboot

Example: To have the PPTP server give out a DNS address of "10.0.0.5", you would type the following in a SSH/telnet session into the router:

Code:

  nvram set pptpd_dns1=10.0.0.5 
  nvram commit 
  reboot