VPN L2TP and DHCP relay

marc3k · #1 (**permalink**) 02-02-2010, 02:18 PM

Hi,

In our network, we use Astaro as VPN Gateway for other user. I wandering if I can forward the DHCP for the VPN client to my Windows DHCP server in my LAN.

There is the topology:

User connect directly from the internet to the Astaro. Astaro route by the other interface the packet to my router and after the router is connect to the other path to my internal Network.

My user VPN use the adresse 10.252.3.0 ... I create this pool in my windows server but i'm almost sure that is not working because when the request comes out the Astaro box, it's cames out with the server adresse ... 192.168.1.2 ... not 10.252.3.1 like it should do....

Sorry if I'm not very clear ...

Somebody know is it's possible to do that ?

Thanks,

Marc-Andre

BAlfson · #2 (**permalink**) 02-02-2010, 06:39 PM

Salut, Marc-Andre,

That's not a problem you should have. I assume that 192.168.1.2 is the IP address of the Internal interface for your Astaro. Please check 'Network Security >> NAT' to be sure you DON'T have a masquerading rule like 'VPN Pool -> Internal'.

If that's not it, then I admit that I'm a bit confused by:

Quote:

Astaro route by the other interface the packet to my router and after the router is connect to the other path to my internal Network.

If your "router" is in routing mode, then perhaps it is doing NAT. You should put that device in bridge mode or just NOT use the WAN port on it.

Cheers - Bob
PS Using the internal DHCP is not a good idea; IPs for the VPN must be in a disjoint subnet from your 'Internal (Network)'.