VPN port 47 through the PIX 1

[jcanfer]

I'm currently testing VPN and I am getting the same error message each time I attempt a connection.....

Win2k is dealing with authentication, port 1723 builds a tunnel, but when 47 attempts to tunnel through I get the error;

106023: Deny protocol 47 src outside:192.150.50.1 dst inside:192.150.50.5 by access-group "acl_in"

The access list acl_in is set up to allow the protocol in through 192.150.50.5 from any source and as I said 1723 builds its inbound TCP connection fine.

Any ideas?

Thanks

 

[Bluecrack]

Do you have both the protocol and the port allowed inbound on in acl_in access list? It sounds like protocl 47 is being blocked.

Try adding these

access-list acl_in permit tcp any 192.150.50.5 eq 1723
access-list acl_in permit 47 any host 192.150.50.5

bluecrack