Chapter 17 System Administration : PPTP and L2TP : Configuring the FortiGate unit for PPTP pass through : Configuring a virtual IP address
  
Configuring a virtual IP address
The virtual IP address will be the address of the PPTP server host.
To define a virtual IP for PPTP pass through - web-based manager
1. Go to Policy & Objects > Objects > Virtual IPs.
2. Select Create New.
3. Choose the VIP Type.
4. Enter the name of the VIP, for example, PPTP_Server.
5. Select the External Interface where the packets will be received for the PPTP server.
6. Enter the External IP Address for the VIP.
7. Select Port Forwarding.
8. Set the Protocol to TCP.
9. Enter the External Service Port of 1723, the default for PPTP.
10. Enter the Map to Port to 1723.
11. Select OK.
To define a virtual IP for PPTP pass through - web-based manager
config firewall vip OR config firewall vip6
edit PPTP_Server
set extinf <interface>
set extip <ip_address>
set portforward enable
set protocol tcp
set extport 1723
set mappedport 1723
end
You can also use config firewall vip46 to define a virtual IP from an IPv4 address to an IPv6 address or config firewall vip64 to define a virtual IP from an IPv6 address to an IPv4 address.
See Also
Configuring a port-forwarding security policy
Configuring the FortiGate unit for PPTP pass through
How PPTP VPNs work
PPTP and L2TP