VPN between W2000' Server and w98 client accross PIX 515

[melospawn]

Hi, I have an Internal VPN w2000 server and I'm trying to do a connection with a w98 client outside the PIX.

I have this lines:

static (inside,outside) 170.20.2.2 10.40.40.10 netmask 255.255.255.255

-....

conduit permit tcp host 170.20.2.2 eq 1723 any
conduit permit gre host 170.20.2.2 any

....

outbound 10 permit 170.20.2.2 255.255.255.255 0 ip
outbound 10 permit 170.20.2.2 255.255.255.255 0 tcp


I can get to the VPN server if I try it from one PC on the inside LAN, and it goes great, even be able to map a drive.

But If i try to connect a PC (w98) from outside to the von server, this is what I get: error 650.

I guet this error when my client sends the user & password to the vpn client.

I have been told that I will need to open a port that the vpn uses to send data , beacuse the port 1723 is only for info & control packets?¿

I really need help, don't know what else I can do . Also, I will like to know which statement I need to use so I can debug the packets.

Thanks a lot in advance


Carpe Diem.
Carmelo Lopez-Portilla
CCNA
e-mail:clopez@infoport.digitainer.com