Networks

Ask something
Discussion Locked

Pix firewall and GRE

0 helpful
5 replies

by michelle m.

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Can anyone offer a solution to getting a VPN with the GRE function through a PIX firewall. I know normally PIX does not support this function without major security issues.

5 replies

by bowieb

The configuration looks like this for a pptp vpn setup:

static (inside,outside) xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy netmask 255.255.255.255 0 0
conduit permit tcp host xxx.xxx.xxx.xxx eq 1723 any
conduit permit gre host xxx.xxx.xxx.xxx any

xxx is the outside address of the vpn server. yyy is the inside address. If you know the IP address of the system that will be connecting, then you can replace the "any" designation with more specific information.

by ann777

The above answer is mostly correct, but you also have to use port 47 for GRE.

What OS version is your PIX?

This discussion is closed to new replies.