PPTP VPDN Error

vinoth.kumar · ‎01-07-2009

Hi,

we are using PIX 6.3 (5)and i a have configured the PPTP connection but i am getting the error in my PIX term mon when i try to connect from my remote PC

the config as follows:

access-list 101 permit ip 10.0.0.0 255.0.0.0 172.16.16.0 255.255.255.240

ip local pool PPTPVPNpool 172.16.16.1-172.16.16.14

vpdn group 1 accept dialin pptp

vpdn group 1 ppp authentication pap

vpdn group 1 ppp authentication chap

vpdn group 1 ppp authentication mschap

vpdn group 1 client configuration address local PPTPVPNpool

vpdn group 1 pptp echo 60

vpdn group 1 client authentication local

vpdn username admin password *********

vpdn enable outside

Can i know why the error is coming

Note : can i work with WINDOWS VISTA also

Regards,

Vinoth

Parminder Sian · ‎01-08-2009

Hi Vinoth,

What exact error message are you getting while connecting. Here a link that might be helpful for you.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080143a5d.shtml

Regards

Parminder Sian

vinoth.kumar · ‎01-08-2009

Thanks for your reply

error msg is :

402106: Rec'd packet not an IPSEC packet. (ip) dest_addr= x.x.0.3, src_addr=

x.x.37.82, prot= tcp

Parminder Sian · ‎01-08-2009

Please check if you have following in your config :-

nat (inside) 0 access-list 101

sysopt connection permit-pptp

And regarding your question on PPTP with Windows Vista. PIX version 6.x only support MS-CHAP v1.0 and Windows Vista does not support version 1.0 of MSCHAP, so probably it wont work.

Regards

Parminder

vinoth.kumar · ‎01-08-2009

ok thanks

nat (inside) 0 access-list 101

sysopt connection permit-pptp

i have already given the above commands but still the error is coming

Regards,

Vinoth

Parminder Sian · ‎01-08-2009

Vinoth,

Would it be possible to see the complete config of your firewall and network diagram if possible.

Also are you trying to terminate VPN client on your pix as well, as the log message is for IPSEC traffic not PPTP.

If yes then please configure different ip pools for vpn client and PPTP

Regards

Parminder Sian