PTP VPN: how to filter remoteIP?

[sghezzi]

Hello,

I have enable PIX to accept PPTP VPN from the external world.
It works fine,
The roblem s that I would like to filter the PPTP access only to a couple of remote public IP (at the moment anybody in the Internet can establish a VPN with us...and we don't want this).
I couldn't find a way to do that.

Does anybody know how to do that?

many thanks
best regards

Silvia

 

[yizhar]

HI.

It is better to migrate your VPN to Cisco IPSec VPN technology which has several advantages, including the option to specify the address of remote clients.
This will then be configured in the dynamic crypto map.

More info and samples:

http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Hardware:PIX&s=Software_Configuration

http://www.cisco.com/pcgi-bin/Suppo...ementation_and_Configuration#Samples_and_Tips

If more convinient for you, you can use GUI to configure the pix for VPN. PDM in pix version 6.2 and above supports this, and also PIXCRIPT:

http://teachers.sivan.co.il/yizhar#pixcript

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar