877 and PPTP termination

Unanswered Question
Mar 7th, 2007
User Badges:


i am currently trying to setup a PPTP VPN termination on a 877, using a single locally defined user.

version of IOS used:

(C870-ADVIPSERVICESK9-M), Version 12.4(6)T5, RELEASE SOFTWARE (fc1)

when i try and connect usign the built in windows XP client, it freezes on

"verifying username and password" and then just times out, so it is actually connecting- its not a access control problem. i can also telnet to the port externally.

so this leads me to believe its most likely an authorization problem, so if anybody could take a look at my config (mostly generated via SDM with certain bits added manually)

ive added the relevent bits of my config as an attachment.

many thanks,

Jamie Walmsley

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Kamal Malhotra Wed, 03/07/2007 - 08:15
User Badges:
  • Cisco Employee,

Hi Jamie,

A few things :

1. Please make sure that the access-list called "sdm_dialer0_in" has GRE permitted.

2. Please make sure that the Win XP client has PAP, CHAP and MS-CHAP enabled in the security tab of properties.

3. Please try using the optional encryption on the client.

4. Try to select PPTP VPN in the Networking tab if it is set to auto.

5. Try disabling the XP firewall temporarily. If it is successful only after disabling the firewall then you should allow this traffic. TCP 1723 and GRE.


Please rate if it helps.


jamiewalmsley Wed, 03/07/2007 - 08:25
User Badges:

Thanks for the quick reply,

i will check that GRE is permitted,

i have PAP, CHAP and MS-CHAP enabled and have tried using encryption, and have the client set to PPTP, and do not run the XP firewall.

i will continue trying out the various settings on the client.


This Discussion