☰

Fortigate PPTP推送預設閘道和DNS伺服器

tag-icon • tag-icon vpn fortigate
Fortigate PPTP推送預設閘道和DNS伺服器

我這裡有一台 fortigate 40C，主要從 Fortigate60 複製設定。一切運作正常，但 PPTP VPN 連線出現一些問題。我想將來添加 SSL VPN，但目前 PPTP 就可以了。

目前我得到了一個工作配置，但有些東西無法正常工作。

  • DNS 伺服器不會推送給客戶端。它應該是 192.168.6.1，就像透過 DHCP 一樣。
  • 客戶端應使用網關 192.168.6.1，而非 192.168.160.1

我使用 OS X VPN 用戶端進行連接，並且手動添加了 dns 條目 + 網路設置，因此它可以工作。

有沒有人知道如何將 DNS + 網關正確推送到客戶端？


   config system dns
        set primary 8.8.8.8
        set secondary 8.8.4.4
        set domain "lan"
   end



config firewall address
       edit "all"
       next
       edit "Internal_Range"
           set subnet 192.168.6.0 255.255.255.0
       next
       edit "PPTP"
           set associated-interface "wan1"
           set type iprange
           set end-ip 192.168.6.180
           set start-ip 192.168.6.160
       next
   end
    config firewall policy
        edit 1
            set srcintf "internal"
            set dstintf "wan1"
            set srcaddr "all"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ANY"
            set nat enable
        next
        edit 50
            set srcintf "wan1"
            set dstintf "internal"
            set srcaddr "PPTP"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ANY"
        next
        edit 4
            set srcintf "wan1"
            set dstintf "wan1"
            set srcaddr "PPTP"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ANY"
            set nat enable
        next
    end
    config vpn pptp
        set status enable
        set eip 192.168.6.180
        set sip 192.168.6.160
        set usrgrp "Wizard_users"
    end
    config system dhcp server
        edit 1
            set default-gateway 192.168.6.1
            set domain "lan"
            set interface "internal"
            config ip-range
                edit 1
                    set end-ip 192.168.6.159
                    set start-ip 192.168.6.100
                next
            end
            set lease-time 345600
            set netmask 255.255.255.0
            set dns-server1 192.168.6.1
        next
    end
    config system interface
    edit "wan1"
        set vdom "root"
        set mode pppoe
        set allowaccess ping
        set type physical
        set alias "FTTB Fixed IP"
        set username "X@X"
        set password ENC X
        set defaultgw enable
        set dns-server-override disable
    next
    edit "modem"
        set vdom "root"
        set mode pppoe
        set type physical
    next
    edit "ssl.root"
        set vdom "root"
        set type tunnel
    next
    edit "internal"
        set vdom "root"
        set ip 192.168.6.1 255.255.255.0
        set allowaccess ping https ssh
        set type physical
        set alias "LAN"
    next
end

編輯：DNS伺服器、閘道均位於IP 192.168.6.1的Fortigate設備上。

答案1

我現在已經可以使用了。我沒有看到 NAT 複選框:(


edit 50
        set srcintf "wan1"
        set dstintf "internal"
            set srcaddr "PPTP"
            set dstaddr "all"
        set action accept
        set schedule "always"
            set service "ANY"
        set nat enable
    next

對於另一部分@mbrownyc 是對的。 Fortigate 無法推送 DNS 伺服器、網關或搜尋網域。

相關內容