pass gre traffic to rras

[mst3k]

Hi there- I have a pix 501 - trying to setup a quick and drirty vpn that just passes all pptp traffic to a win2k rras server. I've got one outside ip address, so part of the solution would be:

static (inside,outside) tcp interface 1723 10.0.1.9 1723
access-list 100 permit tcp any host xx.xx.xx.xx eq 1723
access group 100 in interface outside

what is the static and access list command to pass GRE traffic? And do I need to enter or take away any of the fixup protocol entries?

Thanks much!!

 

[Guest_imported]

Normally, You would only need to add the following command:

access-list 100 permit gre any host x.x.x.x

However, since you are using port redirection, you won't be able to pass GRE traffic in this fashion. GRE is a different protocol type than tcp and udp. Port redirection only supports tcp and udp traffic. You will need to get a dedicated ip address to statically map for the inside server to allow GRE tunnels.

You should look to terminate tunnels to the PIX firewall as an alternative solution.