The Server app can set this up for you if you have an Apple router. Forward external UDP ports 500, 1701, and 4500 (for L2TP) and TCP port 1723 (for PPTP) to the corresponding ports on the VPN server.

Give the VPN server a static address on the local network, and a hostname that is not in the top-level domain 'local' (which is reserved for Bonjour.)ģ. Also in the latter case, you must run a background process to keep the DNS record up to date when your IP address changes.Ģ. The latter must be a DNS record on a public DNS registrar, not on the server itself. Give the gateway either a static external address or a dynamic DNS name. To run a public VPN server behind an NAT gateway, you need to do the following:ġ. Loading plugin /System/Library/Extensions/L2TP.ppp Shouldn't port 500,1701, 1723, 4500 be visible in internal portscan or external site check (Every time I try to connect VPN from my iPhone on 4G-network, the server log shows something like:

My server's websites are reachable over intenret (port 80 and 443). The port forwarding is working on my router. I've configured VPN service on Mac OS Server 5.0 but the VPN ports (UDP 500, 1701, 4500 and TCP 1723) are not reachable over internet or local network.