ProdigyOne2k
asked on
Setting up VPN with pfSense
I am trying to setup a VPN at my workplace with pfSense.
We want to use a simple "vpn.companyname.com" address and then setup the users in the PPTP area of the webGUI.
I've followed many "how-tos" online with no luck - I keep getting errors like "Error 800" and "Error 807" when trying to connect.
So my first question is....
How do I find out the IP that would be the incoming IP for VPN PPTP users? (ie: xxx.xxx.xxx.xxx)
How do I map that IP to vpn.companyname.com?
We want to use a simple "vpn.companyname.com" address and then setup the users in the PPTP area of the webGUI.
I've followed many "how-tos" online with no luck - I keep getting errors like "Error 800" and "Error 807" when trying to connect.
So my first question is....
How do I find out the IP that would be the incoming IP for VPN PPTP users? (ie: xxx.xxx.xxx.xxx)
How do I map that IP to vpn.companyname.com?
ASKER
You mention "Normally the incoming ip would be the public address of the firewall."
How do I find out what the public address of the firewall is? Would it be the same as the "whatismyip.com" address for every computer in the office?
We use everydns.net as our DNS provider - and I do see something setup there with "vpn.companyname.com" - but the IP does *not* match our "whatismyip.com" address on our PCs. When i got to different PCs throughout the office they ALL give the same "whatismyip.com" address so I'm *assuming* that is the IP of the firewall as well - bad assumption?
How do I find out what the public address of the firewall is? Would it be the same as the "whatismyip.com" address for every computer in the office?
We use everydns.net as our DNS provider - and I do see something setup there with "vpn.companyname.com" - but the IP does *not* match our "whatismyip.com" address on our PCs. When i got to different PCs throughout the office they ALL give the same "whatismyip.com" address so I'm *assuming* that is the IP of the firewall as well - bad assumption?
Well, I am assuming the same ;)
The firewall is the gateway to the internet for your network (I assume). So it should have at least two interfaces: one to the inside and one to the outside. When you issue a ifconfig on it you should be able to see the interface setup with the ip addresses.
The firewall is the gateway to the internet for your network (I assume). So it should have at least two interfaces: one to the inside and one to the outside. When you issue a ifconfig on it you should be able to see the interface setup with the ip addresses.
ASKER
Since the IP coming back when I ping "vpn.companyname.com" wasn't matching the IP I get internally - I edited that field on the DNS settings to point to our "whatismyip.com" IP that was coming up. Now DNS takes a bit to refresh correct? (like 24 hours?!?) - when I ping "vpn.companyname.com" the old IP is still showing up - not the new one - figure I just wait it out...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
The mapping is done through your DNS provider. Or if you have access to a 'control panel' for your domain, just create an A record pointing vpn.companyname.com to the formentioned public ip address.