Forum Discussion
NimbostratusThis is a newb question sorry but I'm on day three of this. I need to test my PPTP VPN
OK. I went through the steps to configure and set up a PPTP VPN on the BIGIP-LTM. Bosses want results! How do I go about testing if it works or not. Sorry if this is vague. I'll get any answers you need directly if you need extra information. THanks
6 Replies
What_Lies_Bene1Cirrostratus
Can you ping across it or use ncat or telnet if ping isn't permitted? Don't forget to ensure the source interface/address used is an appropriate one that's allowed across the VPN.
nitass_89166Noctilucent
i understand you are talking about outbound pptp through bigip.
if you cannot test with real pptp client/server, you may try to generate number of gre traffic using hping and see if they are snat'ed correctly.
GRE package by hping2
http://newrice.blogspot.sg/2011/09/gre-package-by-hping2.html!/2011/09/gre-package-by-hping2.html
gossett_151899Yes. I'm sorry you lost me on the gre part :( I'll check into it though! In the LSN pool list where it says MEMBER LIST and it says this: Specifies the set of translation IP addresses available in the pool. This is a collection of IP prefixes with their prefix lengths. All public-side addresses come from the addresses in this group of subnets. This is where I want to put the address that the server will hand out to the client yes?
- nitass
Employee
i understand you are talking about outbound pptp through bigip.
if you cannot test with real pptp client/server, you may try to generate number of gre traffic using hping and see if they are snat'ed correctly.
GRE package by hping2
http://newrice.blogspot.sg/2011/09/gre-package-by-hping2.html!/2011/09/gre-package-by-hping2.html- gossett_151899Yes. I'm sorry you lost me on the gre part :( I'll check into it though! In the LSN pool list where it says MEMBER LIST and it says this: Specifies the set of translation IP addresses available in the pool. This is a collection of IP prefixes with their prefix lengths. All public-side addresses come from the addresses in this group of subnets. This is where I want to put the address that the server will hand out to the client yes?
- gossett_151899I have used this doc but compared to the settings in the F5 it is sadly lacking: http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/cgn-implementations-11-5-0/6.html?sr=36966790
