PPTP denied access

[Constantin]

I finally changed to IAP and I found that the PPTP VPN access does not work while connected to the SSID that the IAP is broadcasting.

Any solution for this ?!

[jkok]

Is your SSID configure to use virtual controller assign IP or network assign IP address?

[Constantin]

controller assign IP

[ckokstar]

It will works if you use network assigned IP address. The client will get the IP address from the router in your local LAN.

[Constantin]

What is the use of having a Virtual controller then ... if I need to set up another computer/device to do DHCP on the network ?!

[ckokstar]

There are few protocols that are not NAT friendly, PPTP is one of them. Other newer VPN protocol such as IPSEC which is much more secure will works across NAT devices. The current version however does not support PPTP over NAT.

[Constantin]

1. Are there any plans to be fixed in next versions of firmware?

2. Is there any link for a document to see special cases like this and recommended work workarounds and ETA on a permanent solution?!

[cjoseph]

The limitation is that PPTP uses GRE which is not very friendly with NAT.  Even when it works, few border devices can actually pass more than one session.  Even if they can, it will not survive a Guest NAT + a NAT at your border firewall.  Ipsec performs better and does is much more nat-friendly.  This is with all devices.