Multiple client VPN - where to put conntrack?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi there,

This may be a very stupid question, but I haven't found the information anywhere, so here goes - I have a working VPN client-server set-up that works through an iptables masquerading NAT configuration but only for one client at a time - and I need to expand it. The VPN is:
- Server - running PPTP (poptop) on Redhat 9 connected directly to the internet via iptables.
- Client(s) - A small network of workstations (Debian, win2k, mac OSX) connected to the internet with ADSL via a Debian router running iptables doing NAT. Currently, tunnels are created from the workstations to the server through the router and internet successfully, but only one machine can connect at a time and I would like to improve on this.


I understand that I need to install PPTP and GRE connection tracking on the Debian router...(and here's the silly question...) will the RH9 PPTP server need conntrack too?

One further question, the ADSL connection at the client end uses PPPoA with LLC - would it be possible for this to stuff up the connection tracking or unlikely? And what about PPPoE? Or is it all just completely dependent on the ISP?

Thanks,

James




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux