Topic: Simultaneous PPtP clients from same IP Fails..

[Luis]

I am try obtain 2 simultaneous PPtP connection to the same remote PPtP Server (e-smith).

My 2 clients have using other e-smith (local) like default gateway to internet.

I lost connection (checked by ping command) to remote server later i make 2 pptp connection from w2k clients.

i cant make pptp connection and obtain differents ip for each, but i lost routing of packet to remote server.

Any body cant help me?..

This is a limitation of pptp protocols ?

Thanks in advance an sorry by my english.

Luis

[Bill Talcott]

Yes, you can only have one connection between 2 public IPs (one at the SME, one at the other network). To make more connections, you need to give the SME multiple IPs and have each client connect to a different one, or give the clients different IPs.

[Luis]

Hi Bill and thanks... i re-post the question in Expert forum next to read

VPN-Masquerade-HOWTO
 in the point 2.7

----------------
2.7 Can several clients on my local network use PPTP simultaneously?
Yes.

You must enable PPTP Call ID masquerade when configuring your kernel in order to distinguish between multiple data streams from the same server. PPTP masq with Call ID masq enabled will support many concurrent masqueraded sessions with no restrictions on which server a client can call.

----------------
The new question is...

Is enabled PPtp Call ID maquerade in the sme KERNEL?.. i post this question in the other forum.

THANKS!!!!

[mike]

Hello,

     To make life a little easier by a snapgear lite+ and have it do the pptp for you instead of having each client connect on their own, with the snap gear you can use pptp or ipsec to connect the network, i connects to the sme sever with no problems.

mike

[Ed]

Hi,

In 5.6, I believe it is enabled in the Kernel but it's broken right now.
In 5.5, and prior - It does not work.

Multiple connects from behind a single NAT router to single Server is not supported by the protocol.  

Win NT - SP4 and later, cheats to make this happen.  


Ed

[Kelvin]

>Multiple connects from behind a single NAT router to single Server is not
>supported by the protocol.

There is a workaround.

Look at my post at the Experience Users Forum.

Kelvin

[Ef]

Thanks for that workaround to have the whole LAN connect to the other LAN.  I have specific needs to have multiple clients,  not everyone on one LAN, to connect to the other.

I think there was a how to posted in the dev forum about forming a PPTP  tunnel between two LAN's

http://www.mail-archive.com/devinfo%40lists.e-smith.org/msg10839.html

Ed

[Alejandro Lengua]

So this means, that it is no possibility to have 2 computers connect (each one)behind NAT to one SME PPTP VPN server?

[Kelvin]

Hi Alejandro,

Let's call the 2 pcs PC1 and PC2.

If PC1 and PC2 are from different internet connections (even behind NAT), no problem.

If PC1 and PC2 are on the same network behind the same NAT router, then by default, they cannot both connect to the same PPTP server at the same time *unless* the NAT router they are using (be it a hardware NAT router or another SME server) has a PPTP client that can connect to the SME PPTP server at the other end. If it does, then both PC1 and PC2 can access the remote SME server at the same time.

IPSec is the way to go for LAN to LAN connections, if possible.

Kelvin