cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
329
Views
0
Helpful
2
Replies

PPTP VPN between PIX and PocketPC 2002 issue

f.vecchiatti
Level 1
Level 1

I'm testing a VPN setup between an iPAQ pocketpc 2002 and a Cisco PIX 515 UR with 3des and IOS 6.2(2). The PIX vpdn setup works with win2000 clients.

With the iPAQ, the connection don't complete, but in the PIX a show vpdn

say that the client is connected.

The same iPAQ can connect to a WIN2000 pptp server.

Is the iPAQ a supported PPTP client ?

The #show vpdn output

Call id 1 is up on tunnel id 1

Remote Internet Address is 213.45.164.14

Session username is vpn_test, state is estabd

Time since event change 408 secs, interface outside

Remote call id is 0

PPP interface id is 1

2956 packets sent, 2951 received, 88916 bytes sent, 41423 received

Seq 2957, Ack 2950, Ack_Rcvd 2955, peer RWS 64

0 out of order packets

Thamks.

2 Replies 2

p.krane
Level 3
Level 3

Yes the iPAQs are supported. I would look over the config of the client again if the setup works with the windows clients.

The iPAQ can connect to a Win2000 server and also to a Linux box so I think the client setup is ok.

With the PIX, the ppp debug report this message:

Rcvd Compression Control Protocol pkt, Action code is: Config Request, len is: 6

Pkt dump: 120600000061

Config MPPC/MPPE: MPPE_128 MPPE_40 MPPC

Xmit Compression Control Protocol pkt, Action code is: Config Reject, len is: 6

Pkt dump: 120601000040

Config MPPC/MPPE: Stateless MPPE_128

Rcvd Compression Control Protocol pkt, Action code is: Config Request, len is: 6

Pkt dump: 120600000061

Config MPPC/MPPE: MPPE_128 MPPE_40 MPPC

Xmit Compression Control Protocol pkt, Action code is: Config Reject, len is: 6

Pkt dump: 120601000040

Config MPPC/MPPE: Stateless MPPE_128

Apparently the iPAQ refuse to negotiate the crypto. Changing the crypto option in the PIX from AUTO to 40 or 128 bits don't solve the problem.

If I remove the encryption, the iPAQ refuse to connect at all.

Thanks.

Federico Vecchiatti