Configuring Firewall on TransPort WR31 for PPTP VPN Server?

Digi TransPort WR (Series)
, ,
1

Hello,

I am having trouble finding any information on how to configure the firewall on a WR31 to allow PPTP VPN. I have setup the PPTP VPN server and am able to connect with the firewall disabled on the mobile interface (PPP1), but the Windows 10 client does not connect with the firewall enabled.

There is an entry for IPSEC VPN in the default script:

#Allow incoming IPSEC
pass break end proto 50
pass in break end proto udp from any to any port=ike
pass in break end proto udp from any to any port=4500
#Allow any traffic within an IPSEC tunnel in both directions
pass break end oneroute any

However, I can’t find any info on the proto for PPTP or what else I need to adjust… Anyone have any knowledge they can share?

Thanks!

2

Hi

the default rules are for IPSEC and not PPTP

if you do a search for ports used in PPTP you will need to open

PPTP

To allow PPTP tunnel maintenance traffic, open TCP 1723.
To allow PPTP tunneled data to pass through router, open Protocol ID 47.

so add rules to allow these should help

pass break end proto 47
pass in break end proto TCP from any to any port=1723

these need to be added at the top of the rule base not after the block rule

hope that helps