CISCO/WINDOWS VPN ROUTER ISSUE

[netmediasystems]

Can anyone offer any idea why I cannot connect to a workstation thru a VPN tunnel when I have perfect layer connectivity?

PRIVATE LAN-----ROUTER---INTERNET----ROUTER---PRIVATE LAN

from any workstation I can ping the workstations on the other side of the tunnel. I can ping them using ex. ping computer001. If I do a NBTSTAT -c the workstations resolve. On my server, WINS displays those remote workstations. Even more odd, one of the location I can connect to!!!! Although, this is an upper layer question, none of the microsoft forum seems to even take a stab at it. The entire network is Windows 2k. The tunnels seem to be working fine, but cant really be used. any suggestions????

brian

 

[netmediasystems]

that was layer 3 connectivity

 

[netmediasystems]

.

 

[shawnpd40]

Is it necessary to create an ACL allowing TCP port 1723 for PPTP or IP 115? The reason I even ask this is if the packet is traversing the router wouldn't the implicit deny any toss any packets using the offending ports?
All theory since I don't have any equipment to try it on...Just a thought!