Skip to main content

Connecting offices (site-to-site) - PPTP VPN

Using PPTP protocol, you can connect Branches that use outdated routers supporting only PPTP to the Main Office (if the device supports IPsec, it is recommended to use PPTP).

If possible, use a more reliable and secure protocol for connecting branches - IPsec. For details on setup, see article Connecting devices.
For SafeUTM communication with SafeUTM, also use IPsec (see article Branches and Main Office).

The setup process consists of two stages:

    Server preparation and configuration of local networks. Creating VPN tunnels and configuring routing.

    Server Preparation and Configuration of Local Networks

    To combine local office networks, you need to ensure the uniqueness of the IP address space in them. Each office should have its own unique network. Otherwise, when creating a VPN tunnel, you may encounter incorrect routing.

    Below is an example of combining networks of two offices. Configure your network and SafeUTM security gateway according to the data in the table below:

    Parameter

    Office No1 (SafeUTM)

    Office No2 (Router)

    IP Address Space

    IP address: 192.168.0.0

    Netmask: 255.255.255.0

    IP address: 192.168.1.0

    Netmask: 255.255.255.0

    Local IP address

    IP address: 192.168.0.1

    Netmask: 255.255.255.0

    IP address: 192.168.1.1

    Netmask: 255.255.255.0

    Creating VPN tunnels and configuring routing

    Internet gateway in Office No1

    1. Create a user account, for example "office2", on behalf of which SafeUTM server in office No2 will connect to SafeUTM server in office No1.

    2. Allow the created account to have Remote access via VPN. This parameter can be activated in section Users -> Accounts -> Main by selecting the desired user.

    image-1661613559290.png

    3. Add routes to the routing table. To do this, go to Services -> Routing -> Local Area Networks and click the add button. We need to add the following route:

      Destination address: 192.168.1.0/255.255.255.0 Gateway: user "office2"

      image-1661613594421.png

      Configuring the router in office No2

      In the example, the settings are given for SafeUTM acting as a router. As a rule, routers from different manufacturers are configured similarly.

      You need to create a VPN connection to a remote server and register a route to a remote network via a VPN connection. To do this, follow these steps:

        Create a new interface of the type Ethernet + PPTP. As a VPN server, specify the external IP address or domain name of office No1, and use the data of the account created on the server in office No1 (in our example, office2) as a username and password. Add routes to the routing table. To do this, in the web interface go to section Services -> Routing and click the add button. Specify the required values and click Save. We need to add the following route:
        Destination address: 192.168.0.0/24 Gateway: Select the Ethernet + PPTP interface that you have created.

        image-1661613688223.png