What ports to open on Cisco Pix 515 for VPN?

[1665]

Hi, I can't connect to my Win2k server at home which is running remote access server; from a friends home PC I can connect to it as he as no firewall restricting him. To connect I use the make new connection > connect to a private network through the internet (VPN) option.

Hope you can help

Andy

 

[themut]

You need to open TCP port 1723 and IP protocol 47. You also need eiether a static translation or you need to run 6.3.X and enable fixup protocol pptp 1723.

 

[1665]

Hi, what are TCP port 1723 and IP protocol 47? What do you mean by 6.3.X and enable fixup?

Sorry for all these questions

A

 

[themut]

TCP port 1723 is the port used to negotiate the PPTP session while ip protocol 47 is GRE which is a means of encapsulating a protocol into another protocol. If you want the details about TCP and GRE then you can read the links below:

TCP:

http://www.faqs.org/rfcs/rfc1180.html

GRE:

http://www.faqs.org/rfcs/rfc2784.html