WinRoute Firewall 6 as a VPN Server Only Center

Dec 10, 2024

Support Center » Knowledgebase » Kerio Control » WinRoute Firewall 6 as a VPN Server Only

	WinRoute Firewall 6 as a VPN Server Only

Solution
WinRoute Firewall 6 may be run as a stand alone VPN server, however, it wasn't intended to be used this way, so it does require additional configuration. There are a few things that need to be considered first:

As always, the WinRoute Firewall computer must have 2 network interfaces, however, if it is behind another firewall, then it is just a node on the network, and probably will only have one network interface, and will not be used as a router. The best way I think to explain how this will work is through an example.

Netscreen firewall
Internet IP is 66.33.22.2, mask 255.255.255.248
LAN IP is 192.168.100.1, mask 255.255.255.0
Gateway is 66.33.22.1

Random PC on LAN
LAN IP is 192.168.100.30, mask 255.255.255.0
Gateway is 192.168.100.1

WinRoute PC on LAN
LAN IP #1 is 192.168.100.2, mask 255.255.255.252
LAN IP #2 is 192.168.100.254, mask 255.255.255.0

WinRoute Traffic Policy

Description: Incoming VPN
Source: VPN clients
Destination: Any
Service: Any
Action: Permit
Translation: IP of outgoing interface - typical setting

Description: Allow everything
Source: Any
Destination: Any
Service: Any
Action: Permit
Translation: None

Article Details

Article ID:

Created On:

Aug 11, 2004 10:57 AM