inside host cannot VPN to PPTP server

[scott.bridges]

ASA 5505

|

3750 switch

|

Windows XP host

Above is a very rough layout. There is no entry that I see that limits outbound traffic.

VPN server is a Windows server. The server and account is setup correctly as I just tested it out at my apartment and connected fine. Not to mention the server is hosting numerous other PPTP clients with the same config.

When I setup the standard Windows VPN connection on the XP machine in the office and hit Connect, it sees the server and gets to "Authenticating" then eventually times out. I forget the exact number of the error code, but it's the one that is "Remote peer has timed out"

So could anything in the ASA be blocking PPTP outgoing traffic by default? Any tips on troubleshooting this?

The server admin seems to think that since I cannot ping the outside (ex: ping www.google.com) and get replies, he thinks that is the problem. To me, PPTP and ICMP have nothing to do with eachother.

Please, any help would be appreciated.

[Kureli Sankar · Accepted solution]

Since this is ASA5505 it has to run 7.x or above. Pls. refer this link below.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094a5a.shtml#new

Add inspect pptp

[bmcginn]

Hi Scott,

Here's a page which may help a bit.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094a5a.shtml#maintask1

Some troubleshooting things that may help are:

capture interface outside

show capture

Ensure the logging on the device is verbose enough:

logging buffer 10240 <1 - 7>

turn on logging:

logging on

This is a good page for help in debugging NAT too:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807ea936.shtml

Good luck with it!

Brad