1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

WRT54GS PPTP or VPN Help Needed!

Discussion in 'Cisco/Linksys Wireless Routers' started by mscafidi, Jun 9, 2006.

  1. mscafidi

    mscafidi Network Guru Member

    I need help setting up a PPTP or VPN setup from one of our central office locations to a branch office running cable.

    Here is the configuration at each site:

    Hub Site: Point to Point T1 coming in from an organization that provides our internet access.

    We are behind a firewall that does NAT and provides us with addresses in the 10.22.4.x subnet. Unfortunately, we have no way to circumvent this architecture and obtain an IP that would be visible via the net.

    Branch Office: Cable modem with dynamic IP.

    Since the branch office does not have a static IP. I would like to use a service such as Dyndns.org and the DDNS client built into the firmware to maintain a static hostname branchoffice.dyndns.org.

    I am new to VPNs, but I was hoping the VPN connection could somehow be established from behind the firewall at the hub site to the branch office which is visible on the internet. Is this set up possible and will it work? If not, what can I do to make this connection work with our configuration? What can I do to get this branch office connected? Thanks in advance for any help you can provide.
  2. sufrano63

    sufrano63 Network Guru Member

    I’ll give it a shot

    Hub Site:

    - Setup a PPTP server using Windows 2003 or XP
    - http://www.onecomputerguy.com/networking/w3k_vpn_server.htm
    - http://www.onecomputerguy.com/networking/xp_vpn_server.htm
    - Create a dyndns account
    - Enable port forwarding PPTP is using on your firewall

    Branch Office

    - Setup PPTP client on desktop
    - http://www.onecomputerguy.com/networking/xp_vpn.htm
    - Connect to dyndns host name

    NOTE: Microsoft PPTP VPN is not secure as you may have aware. Try using diff. type of VPN like IPSec (point-to-point) or SSL. Third party firmware like dd-wrt support built-in VPN server and client like using OpenVPN SSL. dd-wrt also support PPTP server and client as well

    The above PPTP VPN method is quick and easy. My wireless WRT54G is currently running OpenVPN server setup using certificates...more secure
  3. mscafidi

    mscafidi Network Guru Member

    I don't know that I could use dyndns at the hub site because we are behind a firewall that we don't have access to. The organization that provides us with internet access at that hub site has us using the 10.22.4.x subnet. Then our traffic is routed to them and then NAT turns it into an public IP visible to all. That is, atleast my understanding of DDNS and how it works. Correct me if I am wrong.

    I have been theorizing that it would be possible to set up a WRT54GS and enable OpenVPN server at the branch site and have IT use DDNS to get a static hostname. Then I could connect to it from behind the firewall at the Hub Site to establish the VPN connection. In theory it sounds like it would work, but I really have no idea whether or not it would in practice...
  4. sufrano63

    sufrano63 Network Guru Member

    in that case, try my step above in reverse

Share This Page