PIX with PPTP and IPSec for RAS

[ateixido]

I have problems with a PIX when I want to activate IPSec wit XAUTH and I already had PPTP.

When I configure IPSec the PPTP users stops to comunicate with internal resources acrros the Internet VPN.

Any idea about that?

[gfullage]

You probably changed the nat 0 access-list to only reference the IPSec pool of addresses.

Let's say you have this:

ip local pool pptppool 10.1.1.1-10.1.1.254

ip local pool ipsecpool 10.2.2.1-10.2.2.254

and your inside network is 192.168.1.0/24. Your PIX config needs to look like this:

nat (inside) 0 access-list nonat

access-list nonat permit ip 192.168.1.0 255.255.255.0 10.1.1.0 255.255.255.0

access-list nonat permit ip 192.168.1.0 255.255.255.0 10.2.2.0 255.255.255.0

In short, make sure both your IP pools (for the PPTP and IPSec users) are included in the nat 0 access-list.