VPN cannot go through PIX 515 to VPN w2000 SEVER

[melospawn]

Hi there,

I had everything working great with my VPN until I putted a PIX 515 (CISCO) between my router and my vpn server. Now if I try to get to my vpn server the dialer can get to the server but when it tries to check username & password i doesn't work

I guess I have to open some ports at my firewall. I have this lines:

conduit permit tcp host xx.xx.xx.xx eq 1723 any
conduit permit gre host xx.xx.xx.xx any

What I think is wrong is that to send info packets for the tunnel on the vpn the vpn server uses port 1723 and gre, but to send data packets (like password, etc) it uses another port, which I cannot find

Could someone please help me?¿

Thanks a lot.

Carpe Diem.
Carmelo Lopez-Portilla
CCNA
e-mail:clopez@infoport.digitainer.com

 

[Binks7]

I believe it is port 47. I assume, since you mentioned GRE, you are using Win2k. Port 1701 if you are using L2TP. My guess is that you are passing the PPTP packet to the server, but the GRE header gets stopped on the way back.

 

[Guest_imported]

I have exactly the same problem. The VPN is at my house, and the cisco box is at my office. So what is the fix? Do I need to get the IT people to open some ports, and if so, which ones??? 47 ???

 

[melospawn]

Hi there, I already have it fix. My problem was my ISP, it has a Firewall and didn't open the ports for the vpn.

In the cisco PIX you cannot put port 47, you gotta open all the ports for GRE protocol

Slightsey, you gotta tell the people from IT to open port 1723 and all the ports for protocol GRE, (which number is 47, but in a CISCO PIX it already has the tag GRE in Hardware).

Hope this helps.

Thanks to everyone

Carpe Diem.
Carmelo Lopez-Portilla
CCNA
e-mail:clopez@infoport.digitainer.com

 

[desiderius]

I am actually having the same problem, and am not very familiar with how to configure the pix. Can someone give me what I would need to add to the configuration to make this work?

 

[Mrtoddk]

desiderius - Try taking a look at this link.

http://www.cisco.com/warp/public/110/pix_pptp.html