External INET access when using PIX VPN

[tpcolson]

I'm allowing remote users access thru the pix running 6.1. However, when connected, they can only access resources inside the firewall, not "outside" internet addresses. Any ideas on how to fix?

 

[yizhar]

HI.

If your using VPDN (PPTP), then this is a known problem.

The only solution that I know is to switch to IPSec VPN.
This can also increase your security if you implement both vpngroup password and RADIUS xauth.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[tpcolson]

Here is my config for VPDN...I'm using TACAS for auth..how would I go about using IPSEC and still use the W2K native VPn client for connecting?

vpdn group 1 accept dialin pptp
vpdn group 1 ppp authentication pap
vpdn group 1 ppp authentication chap
vpdn group 1 ppp authentication mschap
vpdn group 1 client configuration address local pptp-pool
vpdn group 1 client configuration dns 192.168.1.4 198.6.1.2
vpdn group 1 client configuration wins 192.168.1.4
vpdn group 1 client authentication aaa AuthInbound
vpdn group 1 pptp echo 60
vpdn enable outside
terminal width 80

 

[jlavin]

Why not just change over to the unity client?
what version are you running.
5 or 6?