Aruba Instant & Cloud Wi-Fi

Reply
MVP
Posts: 145
Registered: ‎07-12-2012

PPTP denied access

I finally changed to IAP and I found that the PPTP VPN access does not work while connected to the SSID that the IAP is broadcasting.

 

Any solution for this ?!

If you found my post helpful, please give kudos!
Occasional Contributor II
Posts: 12
Registered: ‎12-02-2011

Re: PPTP denied access

Is your SSID configure to use virtual controller assign IP or network assign IP address?

 

MVP
Posts: 145
Registered: ‎07-12-2012

Re: PPTP denied access

controller assign IP

If you found my post helpful, please give kudos!
Moderator
Posts: 54
Registered: ‎08-29-2012

Re: PPTP denied access

It will works if you use network assigned IP address. The client will get the IP address from the router in your local LAN.

MVP
Posts: 145
Registered: ‎07-12-2012

Re: PPTP denied access

What is the use of having a Virtual controller then ... if I need to set up another computer/device to do DHCP on the network ?!

If you found my post helpful, please give kudos!
Moderator
Posts: 54
Registered: ‎08-29-2012

Re: PPTP denied access

There are few protocols that are not NAT friendly, PPTP is one of them. Other newer VPN protocol such as IPSEC which is much more secure will works across NAT devices. The current version however does not support PPTP over NAT.

MVP
Posts: 145
Registered: ‎07-12-2012

Re: PPTP denied access

1. Are there any plans to be fixed in next versions of firmware?

2. Is there any link for a document to see special cases like this and recommended work workarounds and ETA on a permanent solution?!

If you found my post helpful, please give kudos!
Guru Elite
Posts: 21,010
Registered: ‎03-29-2007

Re: PPTP denied access

The limitation is that PPTP uses GRE which is not very friendly with NAT.  Even when it works, few border devices can actually pass more than one session.  Even if they can, it will not survive a Guest NAT + a NAT at your border firewall.  Ipsec performs better and does is much more nat-friendly.  This is with all devices.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: