Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

L2TP and PPTP functionality on home network ?

I am new to L2TP and PPTP and have some question about functionality.

I have installed "VPN Activator" and configured the L2TP and PPTP server in Mountain Lion on my MBP. I can reach with my iPad the L2TP server and can establish connection. I can reach all functions from my iPad on my MBP (VNC, netstat, presence via tunnel etc).

Now the question: As the iPad gets now from the L2TP server an IP assigned on my home network, I am assuming the iPad is also now part of my homentwork and I should be able to reach all of my devices on the home network as I can do from my MBP. But this seems not to be the case.

If I use VNC client on iPad i can reach the MBP perfectly (using the IP address of my MBP) but if I want to VNC to a other machine on my home network it does not work. Is this not possible? or is it necessary to set some permissions somewhere? Or is L2TP just a point to point connection and to reach other machines I need to setup port mapping/forwarding on my MBP (if this is the case, I would need help how to do this)

Any help on this subject appreciated.

regards, Wolfgang

MacBook Pro, OS X Mountain Lion (10.8.2)

Posted on Jan 17, 2013 2:25 AM

Reply
Question marked as Best reply

Posted on Jan 17, 2013 10:15 AM

It is possible, but the VPN server has to be configured to allow it. I'm not familiary with the product you used, so I don't know whether it does that or not. You'd have to ask the developer.

12 replies

Jan 17, 2013 10:57 AM in response to Linc Davis

The VPN Activator is just a GUI to the L2TP server buildt into ML. S I assume the SW does not configure this feature. Have already sent an email to the developer http://netputing.com/ .

But independent from this, this should be also possible from commandline. Any idea where to find info how to do this in ML if the developer does not answer?

Jan 17, 2013 4:04 PM in response to Linc Davis

Ok thanks. (I do not use the OSX server anymore, webdav server is not compatible with most iPad apps and some other issues)

Anyway I figured it out. Was some mistake on my side during testing. I can reach all machines on the primary network interface of my MBP, but no machines on any virtual networks of MBP (neorouter network etc). If I connect my iPad via L2TP to my MBP and then use IP of a windows machine (on same home network, a VM) I can do port forwarding with a port mapper http://www.analogx.com/contents/download/Network/pmapper/Freeware.htm on my windows VM to any virtual network, is tested and works. Well would be nice to avoid the windows VM and do the port forwarding on MBP itself. Have not found any good instructions how to do this on the new pf firewall in ML. For old Firewall ipfw are some instructions on Google, but I can not find anything for the new FW called pf. Also to use the firewall frontend for pf http://www.hanynet.com/icefloor/ seems overkill and very complicated. Any idea where to find portforwarding instructions for pf firewall in ML?

Thanks again, Wolfgang

Jan 17, 2013 4:20 PM in response to Linc Davis

My MBP at home is connected to router Airport Extreme via 10.0.53.x network, any machine on this network I can reach. I assume the route is set to this network. At the same time the MBP is also on a virtual network (Neorouter VPN, www.neorouter.com, so MBP has 2 different IP addresses on different networks) so the neorouter network is 10.0.0.x. From my MBP I can reach from MBP directly any machine on 10.0.53.x and also directly any machine on 10.0.0.x. But from iPad connected to MBP via L2TP I can only reach the physical network 10.0.53.x

Jan 18, 2013 12:51 AM in response to Linc Davis

ok, the vpnd config looks like this:

/Library/Preferences/SystemConfiguration/com.apple.RemoteAccessServers.plist

=======================================================================


<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>ActiveServers</key>

<array>

<string>com.apple.ppp.pptp</string>

<string>com.apple.ppp.l2tp</string>

</array>

<key>Servers</key>

<dict>

<key>com.apple.ppp.l2tp</key>

<dict>

<key>DNS</key>

<dict>

<key>OfferedSearchDomains</key>

<array/>

<key>OfferedServerAddresses</key>

<array>

<string>8.8.8.8</string>

<string>8.8.4.4</string>

</array>

</dict>

<key>IPv4</key>

<dict>

<key>ConfigMethod</key>

<string>Manual</string>

<key>DestAddressRanges</key>

<array>

<string>10.0.53.220</string>

<string>10.0.53.225</string>

</array>

</dict>

<key>Interface</key>

<dict>

<key>SubType</key>

<string>L2TP</string>

<key>Type</key>

<string>PPP</string>

</dict>

<key>L2TP</key>

<dict>

<key>IPSecSharedSecret</key>

<string>XXXXXXXXXXXX</string>

<key>Transport</key>

<string>IPSec</string>

</dict>

<key>PPP</key>

<dict>

<key>AuthenticatorProtocol</key>

<array>

<string>MSCHAP2</string>

</array>

<key>LCPEchoEnabled</key>

<integer>1</integer>

<key>LCPEchoFailure</key>

<integer>5</integer>

<key>LCPEchoInterval</key>

<integer>60</integer>

<key>Logfile</key>

<string>/var/log/ppp/vpnd.log</string>

<key>VerboseLogging</key>

<integer>1</integer>

</dict>

<key>Server</key>

<dict>

<key>Logfile</key>

<string>/var/log/ppp/vpnd.log</string>

<key>MaximumSessions</key>

<integer>128</integer>

<key>VerboseLogging</key>

<integer>1</integer>

</dict>

</dict>

<key>com.apple.ppp.pptp</key>

<dict>

<key>DNS</key>

<dict>

<key>OfferedSearchDomains</key>

<array/>

<key>OfferedServerAddresses</key>

<array>

<string>8.8.8.8</string>

<string>8.8.4.4</string>

</array>

</dict>

<key>IPv4</key>

<dict>

<key>ConfigMethod</key>

<string>Manual</string>

<key>DestAddressRanges</key>

<array>

<string>10.0.53.220</string>

<string>10.0.53.225</string>

</array>

</dict>

<key>Interface</key>

<dict>

<key>SubType</key>

<string>PPTP</string>

<key>Type</key>

<string>PPP</string>

</dict>

<key>PPP</key>

<dict>

<key>AuthenticatorProtocol</key>

<array>

<string>MSCHAP2</string>

</array>

<key>CCPEnabled</key>

<integer>1</integer>

<key>CCPProtocols</key>

<array>

<string>MPPE</string>

</array>

<key>LCPEchoEnabled</key>

<integer>1</integer>

<key>LCPEchoFailure</key>

<integer>5</integer>

<key>LCPEchoInterval</key>

<integer>60</integer>

<key>Logfile</key>

<string>/var/log/ppp/vpnd.log</string>

<key>MPPEKeySize128</key>

<integer>1</integer>

<key>MPPEKeySize40</key>

<integer>0</integer>

<key>VerboseLogging</key>

<integer>1</integer>

</dict>

<key>Server</key>

<dict>

<key>Logfile</key>

<string>/var/log/ppp/vpnd.log</string>

<key>MaximumSessions</key>

<integer>128</integer>

<key>VerboseLogging</key>

<integer>1</integer>

</dict>

</dict>

</dict>

</dict>

</plist>


=========================================================

in hostconfi is nothing, also nothing in networkconfig



As from my MBP all works to reach the virtual network, the regular route setting should be ok (I am not sure if it is a good idea to add with "route command" a new route when all routes are already working when done locally form MBP, so the new route should only apply for L2TP but not for any other applications on MBP). So where should the new route be configured for the VPN. In vpnd ?, this is not clear for me in the vpnd man pages? In vpnd config file I can only see the assigned IP address range for the L2TP client (and this is the physical network, where all works).

L2TP and PPTP functionality on home network ?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.