Real Time Ascend Maling List Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) using PPTP on our max2000
>
>We currently use our max2000 for dial-up access to our corporate LAN (1PRI
>accepting ISDN/analoge calls), users are verified using Radius. Can it be
>configured to accept PPTP connections as well? I would like to have some
>users dial a local ISP (or use cable modem), have our max verify him and
>setup a tunnel to the corporate LAN.
The MAX can only be a PAC (PPTP Access Concentrator). If I understand
what you are asking correctly, what you need is a PNS. The only one
that I know works reasonably well is Windoze NT Server.
The MAX will not terminate a PPTP tunnel: it can only start one.
This is the only way that you can do PPTP with the MAX:
[user] -----{ PSTN }----- [MAX] ---(IP)--- [PNS]
<----PPTP---->
<-------------- PPP ------------------>
When 'user' dials into the MAX, the MAX starts a PPTP tunnel to the PNS. The
PNS implements the PPP stack complementary of the 'user'.
If this is what you want to do, then you can configure the MAX to
create tunnels just by creating appropriate RADIUS profiles.
For example, assuming you are running 8.0:
joe Password='donttell'
Tunnel-Type=PPTP,
Tunnel-Server-Endpoint=pns.company.com
When 'joe' dials in, the MAX will start a PPTP tunnel for him.
If you want the max to terminate a tunnel, you have two other
options: use ATMP, a layer 3 tunneling protocol or use L2TP,
another layer 2 tunneling protocol. A MAX can be an LNS (the
L2TP simil to PPTP's PNS above) or an ATMP HA.
Makes sense?
-J
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>