Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

PPTP through PIX 6.3

Please,

How could I enable pptp through pix, without problems, time outs, warnings, etc..

The client VPN is in the inside and the server is in the outside.

fixup ?

access list ?

static ?

??

To reach the outside there are two firewalls pix.

Thanks.

4 REPLIES

Re: PPTP through PIX 6.3

helllo

Refer to the following URL:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094a5a.shtml

you need to open TCP 1723, GRE and do a fixup for PPTP ... this will enable communication from inside to a PPTP server on the outside

Hope this helps... all the best..

Raj

New Member

Re: PPTP through PIX 6.3

Please, could you send the command lines?.

I already have the fixup, nat, and global.

But, which access lists?, only to the outside, to the inside?, If i have the fixup.... i have to open gre too?.

Thanks.

New Member

Re: PPTP through PIX 6.3

Is there any problem when configuring FIXUP PROTOCOL PPTP 1723 ?

thks.

New Member

Re: PPTP through PIX 6.3

To allow for users inside your network to access a vpn connection outside your network, you just need:

fixup protocol pptp 1723

To allow users from outside your network to access a vpn inside your network you will need to do a static and 2 access-list:

static (inside, outside) x.x.x.x y.y.y.y netmask 255.255.255.255 0 0

x.x.x.x=outside ip

y.y.y.y=inside ip

access-list 101 permit tcp any host x.x.x.x eq pptp

access-list 101 permit gre any host x.x.x.x

access-group 101 in interface outside

112
Views
0
Helpful
4
Replies
CreatePlease to create content