L2TP through an Airport Extreme
Hi, I just bought an airport extreme, which I connected to a public IP address and setup to act as firewall and DHCP server on my local network (AEBS is 10.0.1.1, my internal server with OD, DNS etc. is 10.0.1.2). The AEBS replaces an old and slow Belkin wifi router.
Everything seems to work, but I have a problem with VPN: I would like to connect from the internet to the internal server, but this appears to work only via PPTP, not via L2TP (and here in Italy there are ISPs which do not allow PPTP traffic, so I must get L2TP to work). I have set up port forwarding for 500, 1701, 4500 (all UDP) and 1723 (TCP).
As I said, connections via PPTP work fine, but L2TP requests are unsuccesful. If I do a port check from outside, I am told that 1723 is open, but the other three are closed. So, apparently, AEBS is ignoring my port forward settings on those three ports.
I have googled the issue a bit, and it appears to be common, but all refer to old postings. There are some suggestions to set the server as default host (effectively putting it in DMZ), but this does not work for me, and even if it were it would not be acceptable from a security point of view.
So, does anyone know the final word on this issue? Is there no way at all to use an AEBS for L2TP passthrough?
Thanks
Chris
Everything seems to work, but I have a problem with VPN: I would like to connect from the internet to the internal server, but this appears to work only via PPTP, not via L2TP (and here in Italy there are ISPs which do not allow PPTP traffic, so I must get L2TP to work). I have set up port forwarding for 500, 1701, 4500 (all UDP) and 1723 (TCP).
As I said, connections via PPTP work fine, but L2TP requests are unsuccesful. If I do a port check from outside, I am told that 1723 is open, but the other three are closed. So, apparently, AEBS is ignoring my port forward settings on those three ports.
I have googled the issue a bit, and it appears to be common, but all refer to old postings. There are some suggestions to set the server as default host (effectively putting it in DMZ), but this does not work for me, and even if it were it would not be acceptable from a security point of view.
So, does anyone know the final word on this issue? Is there no way at all to use an AEBS for L2TP passthrough?
Thanks
Chris
MacMini Server, Mac OS X (10.6.2)
