Issue with Cisco Pix 501, and MS VPN connecting to Cisco 3005 VPN? Multiple connections

Feb 11, 2008 3 Replies

We are setting up a temporary satellite office about 15 minutes away, and we are running into a minor problem with the client connectivity from that office.



Ill explain the hardware real quick. In our main office, we have a PIX



506e Firewall, with the 3005 Concentrator behind it for VPN. We are using the MS client via PPTP to connect for VPN.

In the satellite office, we simply have a Pix 501, with 6-8 client desktops behind it. We will need all of them to be able to connect to the Cisco VPN using the MS Windows VPN connection.



Is there something i need to do to make this happen? Right now it appears that one 1 of them at a time can connect.



Thanks in advance.... I am not a cisco certified guy yet, but i plan on working towards it someday soon.



Rodney


Yes for windows PPTP clients you need to inspect PPTP at the PIX level. We ran into an issue like that.

Versions = 7.0

pixfirewall(config)#policy-map global_policy

pixfirewall(config-pmap)#class inspection_default

pixfirewall(config-pmap-c)#inspect pptp

Hope that helps.

You may also need to allow GRE through.

thanks, will be going down there and trying it today!!

I will let you know

Sorry, i should have informed you that we are at version 6.3(5) for the pix 501.

I already these entries in place.

Is there someth> Yes for windows PPTP clients you need to inspect PPTP at the PIX level.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required