Networks

Ask something
Discussion Locked

Windows 2K VPN Through Pix 515

0 helpful
4 replies

by sigboat

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a Win2k Machine set up as a VPN Server, and a Cisco PIX 515 Firewall (Ver 6.1). There is an outside location with one Win2K Pro machine connected to the internet by DSL. I have configured the PIX to open ports 1723 and 47. However I can not get a connection. It will get as far as "Verifying User Name and Password" Then it will give me Error 721 "Remote computer not responding"
I believe that the Firewall is to blame but am not sure. I used Conduit commands to open 1723 and 47. Is this correct? Any suggestions would be greatly appriciated.

4 replies

by fjaramillo

We use the same setup, we have a static translation for the external IP (1.2.3.4) to the internal (172.16.x.x)
The conduits that we use are
static (dmz1,outside) 1.2.3.4 172.16.x.x
netmask 255.255.255.255 0 0
conduit permit gre any any
conduit permit tcp host 1.2.3.4 eq 1723 any
=================================================
I think your problem might be RRAS related. How's the RRAS configured.

You can also check on the pix to see the pptp session:

"show conn lport 1723"

Hope this helps.
Nando

by sigboat

Much appreciated Nando! That worked! I was missing the "Conduit permit gre any any" line on my firewall. Thanks again.

This discussion is closed to new replies.