I'm hoping that someone can help with a strange PPTP / MS-Chap problem that I have. We are installing a number of Cisco 827H (now 837's) in our customer sites for Internet access and VPN's (using Ipsec).
As an extra feature I would like to set up the 827H as a PPTP end point so that our support personal can use the Windows VPN client to attach to the IP network (a mixture of MS W2K server and W2K peer to peer).
I'm using 12.2(8)YM IOS on the IOS. When I try and connect the W2K never passes the username and password section. I've done a debug and I can see a MS-CHAP success packet been returned, but it never gets to the W2K machine, I've used MS network monitor to see the packets coming from the 827H and there is no PPPCHAP success, I can see the PPPCHAP challange and response. Is it possible that the 827 is sending the PPPCHAP sucess as an encrypted GRE packet ?
827H Debug PPP AUTH
*Mar 1 08:59:08.469: ppp4 PPP: Using set call direction
*Mar 1 08:59:08.469: ppp4 PPP: Treating connection as a callin
*Mar 1 08:59:08.469: ppp4 PPP: Phase is ESTABLISHING, Active Open
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...