VPN Ports

soshomile · ‎07-25-2007

Deal All;

(Need urgent attention)

i have configured VPDN in my PIX 525. i also implement access-list to allow certain exchange traffic and VPN traffic. but after implementing the access-list, users are not able to dial VPN connection. error 800 appear while they tyr to connect. my exchange traffic is now smooth.

please tell me which VPN port should i allow to overcome this Issue.

i need urgent reply..

regards

Soshomile

mattiaseriksson · ‎07-25-2007

Hi, TCP port 1723 must be open and Protocol 47 (GRE).

soshomile · ‎07-25-2007

Dear mattiaseriksson

please review it.....i already configured it like this...need your kind comments...

access-list pcc permit tcp any any eq pptp

access-list pcc permit gre any host x.x.x.x

sosho

mattiaseriksson · ‎07-25-2007

That should work.

But if you use PAT you also need to enable PPTP inspection:

fixup protocol pptp

If it still doesn't work, check if any packets matches the lines in the access-list, and what the logfile gives.

I hope that helps.