Connecting to a VPN server through our PIX 515 firewall

[kylesmith]

I'm using a PIX 515 running 6.2 IOS with 3 ports. I have a W2K VPN Server in the DMZ interface that I would like to our W2K client to conntect to. Is this possible? If this is possible what do I have to do? I have setup a vpn connection using to PIX but I was wondering about the other setup.

[paqiu]

Microsoft VPN is PPTP protocol using TCP port 1723 and protocol GRE.

Make sure you static translate the w2k server from DMZ to outside public ip address and open those ports.

x.x.x.x is the translated ip address (public) , y.y.y.y is the W2k server in the DMZ.

static (dmz, outside) x.x.x.x y.y.y.y

conduit permit tcp host x.x.x.x eq 1723 any

conduit permit gre host x.x.x.x any

Best Regards,