[c-nsp] PPTP and NAT

[Brett Looney]

At 16:57 7/08/2006, you wrote:
>I have a customer who wants me to configure his router in order to have port
>1723 of one of his public addresses redirected to 192.168.254.5, and IP
>protocol 47 forwarded to the same private IP.
>
>So I guess he wants to have incoming PPTP sessions.
>
>How do I do this with NAT? It seems that only UDP and TCP can be processed,
>not IP protocol 47:

You have to do a NAT on the entire IP address. No way of getting 
around it that I know of. And then you'll need to put in an ACL to 
allow only 1723/TCP and GRE through.

B.