[CLOUDSTACK-9372] Cannot create PPTP VPN from guest instance to endpoint outside of the cloud

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 4.5.2
• Component/s: Virtual Router
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Abhinandan Prateek
• Reporter: Paul Angus
• Created: 28/Apr/16 10:51
• Updated: 13/Jul/17 10:08

Description

A user cannot create a PPTP VPN from guest instance to endpoint outside of the cloud

In order to enable the VPN to function, the cloud admin ran the following on the user's VR:

iptables -t mangle -I FIREWALL_xxx.xxx.xxx.xxx -p 47 -j ACCEPT
modprobe ip_conntrack_pptp
modprobe ip_nat_pptp