Kerio Technologies UK

  Winroute Pro - Hot Topics - PPPoE Kerio.co.uk > Technical Support > WinRoute Pro > Hot Topics - PPPoE   
.
.
. Technical Support Links . .
.
. Technical Support
Support Policies
Solution In Focus
The SysDump utility
The MAPI Test utility
The Userdump Utility

Kerio MailServer
Manual
Quick Checklist
Product Knowledgebase

Kerio WinRoute Firewall
Manual
Product Knowledgebase

WinRoute Pro
Manual
PPPoE
Product Knowledgebase

Kerio Personal Firewall
Manual
Product Knowledgebase

WinRoute Lite
Manual

Kerio Network Monitor
Manual

. Configuring WinRoute Pro/Lite with ADSL using PPPoE

Many DSL service providers offer a connection method for their service called PPP over Ethernet or PPP over ADSL. PPPoE combines the Point-to-Point Protocol (PPP), commonly used in dialup connections, with the Ethernet protocol. With PPPoE, the user must install special software that is used to announce the computers presence and to obtain an IP configuration. In the process, the software uses a virtual interface to encapsulate each ethernet frame with additional header information. Depending on the type of PPPoE software used, WinRoute may need to be adjusted to fragment data packets, or in some cases, you will need to lower the Maximum Transmission Unit (MTU) on each computer behind WinRoute.

Basic network setup for PPPoE:

IP Configuration: (For basic configuration with only two Ethernet adapters, though more may be used)

Assign an IP address and subnet mask to both ethernet adapters and nothing more, eg. no gateway/dns etc.
For example NIC1 may have an address like 192.168.10.1 mask 255.255.255.0
NIC2 may have an address like 192.168.20.1 mask 255.255.255.0
It is a common misconception that the interface connected to the ADSL modem should use DHCP. You must assign this adapter an IP address and mask and it must be in a different subnet than any other interface so that proper routing may take place.

NAT Configuration:

The PPPoE software supplied to you should install specific drivers as well as an additional interface. This interface is typically identified in WinRoute as either a virtual ethernet adapter or a RAS connection. You must enable NAT on only this interface. Note that NAT will be enabled by default for all RAS adapters. For WinRoute Lite users, if your PPPoE adapter is a RAS type you must specify dial-up as your connection type and select the corresponding PPPoE RAS connection from the drop down menu. If it is a virtual adapter you will specify a second network adapter and select the PPPoE adapter from the drop down menu.

PPPoE Configuration:

RASPPPOE by Robert Schlabbach and WinPoet from Fine Point Technologies

WinRoute works best with these known PPPoE software providers because they both use RAS interfaces to connect to the internet. Most users choose to set the connection to persistent dial for an "always on" connection. By using RAS, WinRoute may remain running as a system service and initiate the connection at start-up. You may notice an error WRSendPacket() failure in the error log. This can be fixed by allowing WinRoute to fragment incoming packets. See below for further explanation and instruction.

Enternet 300 by Efficient Networks

In the advanced connections/settings of the Enternet 300 you must enable protocol driver in place of filter driver. You must also connect to the internet and successfully receive your IP configuration before starting the WinRoute engine. This means that you must disable WinRoute as a service so that it will not launch the engine at startup. NAT must only be enabled on the NTS pppoe adapter. If you have WinRoute Lite this adapter should be specified as your 2nd network adapter.

WRSendPacket() failure

It is likely that you will find this message in the error log of WinRoute. This message indicates that WinRoute was not able to transmit an IP packet. In most cases this can be resolved by enabling a value in the registry under hklm/software/kerio/winroute -> IPFragMode or in WinRoute lite it is located in hklm/software/kerio/wrlite/IPFragMode. This will allow WinRoute to set the 'don't fragment' flag to false, allowing packets to be properly handled through the PPPoE interface.

Setting The MTU

The Maximum Transmission Unit (MTU) is a value that defines the maximum size of each packet leaving your computer. You may need to lower this value on each computer behind WinRoute. To see if this is necessary you can perform a ping test as follows.
From a dos window type: ping -f -l 1472 yahoo.com
If you receive the message: Packet needs to be fragmented but DF set. Then you need to lower the MTU. Try the same test again using 1400 in place of 1472. If you get a message like: Reply from 216.115.108.243: bytes=1472 time=180ms TTL=246. Then 1400 is a sufficient size. Otherwise you'll need to continue lowering the value until you get a reply.


Windows 95/98/ME
HKEY_LOCAL_MACHINESYSTEM/CurrentControlSet/Services/Class/NetTrans/00x/MaxMTU (STRING Value)
- If you are unclear on which 000x folder is your current Ethernet Adapter, exit registry editor, go into your Ethernet TCP/IP setting under network configuration, enter an IP manually, close and reboot the system. After reboot, get into the registry editor again, you will then find the 000x folder contain the IP address you just entered.

NOTE: If “MaxMTU” value is not present by default you need to add it as a string value.

Set the value data to the packet size determined by the Fragmentation test
-----------------------------------------------------------------

Windows NT
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/”ethernet-adapter”/Parameters/Tcpip/MTU (dword Value)

NOTE: If the “MTU” value is not present by default you will need to add it as a dword value.

Set the value data to the packet size determined by the Fragmentation test
------------------------------------------------------------------

Windows 2000/XP
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters/Interfaces{interface}/MTU (DWORD Value)

NOTE: If the “MTU” value is not present by default you may need to add it as a dword value.

Set the value data (as decimal) to the packet size determined by the Fragmentation test
------------------------------------------------------------------

Mac OS X
From a terminal window log in to root as administrator. Type: ifconfig en0 mtu 1400. Where en0 represents the interface connected to the local network. If you have multiple interfaces it may be en1, en2...

.
.
Webmaster | Privacy Policy | Terms of Use
WinRoute™, Kerio™ and Kerio logo are protected trademarks. All other trademarks belong to their respective owners.
Kerio Technologies UK Ltd. is a company registered in England and Wales with VAT number 798708653
Kerio Technologies UK Ltd. Is a subsidury of Kerio Technologies Inc.
English (USA) | English (UK) | English (EU)
Česky | Slovensky | Русский