Multiple client VPN - where to put conntrack?
zping at founderbn.com
Wed Nov 10 02:01:38 CET 2004
This may be a very stupid question, but I haven't found the information
anywhere, so here goes - I have a working VPN client-server set-up that
works through an iptables masquerading NAT configuration but only for
one client at a time - and I need to expand it. The VPN is:
- Server - running PPTP (poptop) on Redhat 9 connected directly to the
internet via iptables.
- Client(s) - A small network of workstations (Debian, win2k, mac OSX)
connected to the internet with ADSL via a Debian router running iptables
doing NAT. Currently, tunnels are created from the workstations to the
server through the router and internet successfully, but only one
machine can connect at a time and I would like to improve on this.
I understand that I need to install PPTP and GRE connection tracking on
the Debian router...(and here's the silly question...) will the RH9 PPTP
server need conntrack too?
One further question, the ADSL connection at the client end uses PPPoA
with LLC - would it be possible for this to stuff up the connection
tracking or unlikely? And what about PPPoE? Or is it all just completely
dependent on the ISP?
I should update your ppp server
More information about the netfilter