WSM User Guide - WatchGuard Technologies

Enabling RUVPN with PPTPEnabling RUVPN with PPTPTo configure RUVPN with PPTP you must enable the feature. RUVPN with PPTP adds the WatchGuard®PPTP policy icon to Policy Manager. This sets default properties for PPTP connections and for the trafficthat flows to and from them. We recommend that you do not change the default properties of theWatchGuard PPTP policy.1 From Policy Manager, click VPN > Remote Users. Click the PPTP tab.2 Select the Activate Remote User check box.3 If necessary, select the Enable Drop from 128-bit to 40-bit check box.Usually, only customers outside the United States use this check box.Enabling extended authenticationRUVPN with extended authentication lets users authenticate to a RADIUS authentication server as analternative to the Firebox®. For more information on extended authentication, see “Extended authentication”on page 227.1 Select the Use RADIUS Authentication to authenticate remote users check box. Refer to thefigure in the previous section.2 Configure the RADIUS server in the Authentication Servers dialog box. Refer to “ImplementingAuthentication,” on page 121.3 On the RADIUS server, create a PPTP-Users group and add names or groups of PPTP users.Adding IP Addresses for RUVPN SessionsRUVPN with PPTP gives support to as many as 50 users at the same time. The Firebox® gives an open IPaddress to each incoming RUVPN user from a group of available addresses. This goes on until all theaddresses are in use. After a user closes a session, the address is put back in the available group. The subsequentuser who logs in gets this address.For more information about how to get IP addresses for RUVPN clients, see “IP Addressing” on page 228.You must configure two or more IP addresses for PPTP to operate correctly.From the PPTP tab on the Remote Users Configuration dialog box:1 Click Add.The Add Address dialog box appears.User Guide 281