The following lines allow the VPN L2TP and PPTP tunnel connections to come back through your firewall (client side).
access-list 100 permit udp host vpnserverip host clientoutsideip eq 1701
access-list 100 permit gre host vpnserverip host clientoutsideip
Of course you could replace either IP...
Appologies for unearthing an old post, but would it not be possible to connect a secondary internet access point to a different interface on the PIX, then set up a route for it in the configuration, then, for example, use it as a PAT address?
Nevermind, I got it.
FYI:
For PPTP:
access-list acl_out permit gre host [VPN server] host [VPN client]
If you are using L2TP, then the following line is needed IN ADDITION to the above (this is what had me before):
access-list acl_out permit udp host [VPN server] host [VPN client] eq 1701
I'm trying to set up our PIX firewall to allow MS VPN clients on the inside network connect to a VPN server (Instagate EX2 I believe) running L2TP out on the internet. Currently I am getting Error 619: The specified port is not connected. Does anyone know of any specific ports I need to open to...
Is there no way to close the open SMTP relay on Exchange 2000 Servers? Right now my answer is yes, but I wanted to confirm it with some of the more knowledgeable fellows about this forum. It seems that no matter what settings I use on the SMTP Virtual Server on our Exchange server, it remains an...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.