NAT pools

whiteford · ‎07-12-2007

We loads of users that connect to an external VPN we have give each user an external IP to NAT to their internal IP for the PPTP to work and the Gre protocol, can we just use one external IP? They rarely log on at the same time.

JBDanford2002 · ‎07-12-2007

Yes, on 6.3X there is the following command:

fixup protocol pptp

On 7.0, You have to use the inspect pptp command.

This link should cover both.

http://www.cisco.com/warp/public/110/pix_pptp.html

whiteford · ‎07-12-2007

I can only use the ADSM, how can I do that in there?

JBDanford2002 · ‎07-13-2007

ASDM --> Configure --> Security Policy --> Service Policy Rules --> Double Click on your Policy --> Select Rule Actions --> Under Protocol Inspection Select "PPTP" --> Click "OK" --> Click "Apply" --> Click "Save"

whiteford · ‎07-13-2007

I only have a default rule in there, what will this achieve?

Doing just this would mean PPTP would just work? And I can remove all the NAT's to users?