Koozali.org: home of the SME Server

Allocation of address with VPN

kevin Manderson

Allocation of address with VPN
« on: July 14, 2002, 08:59:02 AM »
Have a query regarding the allocation of VPN addresses.

Checked out /var/lib/dhcp/dhcpd.leases, however, although we have been using this for several months there are no entries - so the PPtP doesn't use that method to allocate addresses. /etc/pptpd.conf has the connection information and the two IPs that have been allocated but no means to fix them.

Situation. Users at remote site use W2k and PPtP to connect to main site. The main site isn't on a static IP, but a dynamic dns facility does the job fine.
Works well and can use the main application on the main unix system. SME allocates an address from the top of the dhcp space (was set at 200-250, then disabled) so they get either 250 or 249. Am now considering another remote site to connect but we need to ensure each user get the same IP so the printer is correctly defined as attached to 'their' pc.

Query - can I set pptpd so a VPN incoming user gets the same IP (similar to setting the MAC address in the dhcpd.conf file). If I could get a tunnel between the sites and have the remote users with a fixed ip within the C class range of the main site it would be fine. Do we have to change to a static IP and use IPsec?

The information about service link is scant and doesn't give a clue as to being able to provide this sort of facility - jargon compliant but content free. I just can't see management buying into something that has no details/specs.

Any help appreciated
Kevin

john

Re: Allocation of address with VPN
« Reply #1 on: August 08, 2002, 03:54:06 PM »
http://www2.educ.umu.se/~bjorn/linux/ldp/nag/node121.html

Try the chap secrets file, where you can allocate an ip via login name, not sure how to apply via the templates but depending on how many users you have to fix you could just make the file a manual updated job.