I was using my RB750G up to now as my main router and it has been working rock solid. For numerous reasons I have switched back to my DIR-655 doing the routing now. Would it be possible to have the RB750G do only the VPN and the DIR-655 do the routing? Would be as simple as disabling all firewall rules on the RB and setting up VPN how you normally do and then forwarding port 1723 and 500 from the Dlink to the RB?
Bump.
Would be as simple as disabling all firewall rules on the RB and setting up VPN how you normally do and then forwarding port 1723 and 500 from the Dlink to the RB?
Yes. Though you can, of course, still run firewalling on the RB. But you can turn it off for performance or complexity reasons. What you need to forward depends on the VPN protocol. The ports you list are a little confused. PPTP uses TCP/1723 as a control channel and GRE (IP protocol 47) for data. You can forward those via NAT if your D-Link allows for it - not all consumer routers can forward protocols other than TCP and UDP. Port 500 might be referring to UDP/500 - that would be ISAKMP, which is part of the IPSec protocol suite. IPSec requires UDP/500 and IP protocols 50 or 51 depending on whether you’re using AH or EPS, and UDP/4500 if you’re using NAT-T (which you would be if the IPSec endpoint sits behind another NAT router).