cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
530
Views
0
Helpful
3
Replies

PPPoE and PPTP

rado.jelen
Level 1
Level 1

Hi,

Is it posible to configure PPTP tunnel to work over PPPoE tunnel in IOS router and how can that be done, or maybe over GRE tunnel ??

I think this is not supported on Pix firewall.

R.

3 Replies 3

afakhan
Level 4
Level 4

Hi,

IOS and PIX both can be configured as PPTP servers, even if your outside Internet connection is based on PPPoE(ie ADSL).

If you want to encrypt GRE tunnels, then you should use IPSec.

Thanks,

Afaq

I have Verizon DSL (PPPoe) connected to my PIX501 ver 6.2.2 PDM 2.0.2.

I had to disable vpdn on outside interface on the PIX otherwise PPPoe wouldn't work (it can't have both PPPoe and vpdn on same interface accoring to the PIX error message).

does that mean that I can't access the PIX501 with PPTP VPN anymore?

is there any other VPN method I can use from remote mobile clients?

cisco docs say it is NOT possible on pix 6.2. see:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00801055dd.shtml

but is there a way to do it?

I tried VPN wizard for PPTP and got the following message on the PIX:

[OK] vpdn group PPTP-VPDN-GROUP accept dialin pptp

[OK] vpdn group PPTP-VPDN-GROUP ppp authentication pap

[OK] vpdn group PPTP-VPDN-GROUP ppp authentication chap

[OK] vpdn group PPTP-VPDN-GROUP ppp authentication mschap

[OK] vpdn group PPTP-VPDN-GROUP client authentication local

[OK] ip local pool VPNPool01 10.100.100.200-10.100.100.220

[OK] vpdn group PPTP-VPDN-GROUP client configuration address local VPNPool01

[OK] vpdn group PPTP-VPDN-GROUP ppp encryption mppe auto required

[ERR] vpdn enable outside

Can not enable vpdn on the same interface as PPPoE.

Command failed

access-list inside_outbound_nat0_acl permit ip any 10.100.100.192 255.255.255.224

nat (inside) 0 access-list inside_outbound_nat0_acl

sysopt connection permit-pptp

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: