Eicon Networks S92 Manuale Utente Scaricare il pdf (Pagina 127)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 127

PPTP inputpacketfiltersareconfiguredontheadapterthatisonthesideof the

Internet(192.168.6.2).

Thisinterface’sInputFiltersshouldbeconfiguredsothat thefilteractionissetto

Dropallpacketsexceptthosethatmeetthecriteriabelow:

n DestinationIPaddressoftheVPNserver'sInternetinterface(192.168.6.2),

subnetmaskof255.255.255.255,andTCPdestinationportof1723.Thisallows

PPTPtunnelmaintenancetrafficfromthePPTPclientstothePPTPserver.

n DestinationIP addressoftheVPNserver'sInternetinterface(192.168.6.2),

subnetmaskof255.255.255.255,andIPProtocolIDof47.Thisfilterallows

PPTPtunneleddatafromthePPTPclientstothePPTPserver.

Donotuse“TCP[established]”astheporttype.ThisfilterisrequiredonlyiftheVPN

serverisactingasaVPNclient(acallingrouter)inaroutertorouterVPNconnection

inwhichtrafficisacceptedonlyiftheVPNserverinitiatedtheTCPconnection.

1 2 ... 122 123 124 125 126 127 128 129 130 131 132 ... 208 209

Nessun commento

Eicon Networks S92 Manuale Utente Pagina 127