RE: PPTP win98 to PIX not working [7:74521]
Windows automatically adds a dynamic route once the PPTP connection is established, or at least it should. Basically, it sets the metric to 2 for your old default router, and adds in a new default route with a metric of 1 once the tunnel is established. If you are not getting the tunnel established, then you won't see this. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing or transmission error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Michael Barnhart [mailto:[EMAIL PROTECTED] Sent: Monday, September 01, 2003 10:40 AM To: [EMAIL PROTECTED] Subject: RE: PPTP win98 to PIX not working [7:74521] Sorry, I have that line but forgot to post it. The only thing I can think of, is that Win98 gets confused as to where to send the packets. It only has one default gateway (the one on the network adapter for the local network). I am curious how the TCP/IP Stack knows to send items destined for the network inside the VPN lan through the virtual adapter. Do I need manual router statements on the Win98 PC? Any ideas how to make them without knowing that IP address the PPTP adapter will get? **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=74655t=74521 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: PPTP win98 to PIX not working [7:74521]
You also need this command: sysopt connection permit-pptp This is my working config: vpdn group 1 accept dialin pptp vpdn group 1 ppp authentication mschap vpdn group 1 ppp encryption mppe auto vpdn group 1 client configuration address local pptp vpdn group 1 client configuration dns ProxySvr vpdn group 1 client configuration wins ProxySvr vpdn group 1 pptp echo 60 vpdn group 1 client authentication local -Original Message- From: Michael Barnhart [mailto:[EMAIL PROTECTED] Sent: 29 August 2003 21:11 To: [EMAIL PROTECTED] Subject: PPTP win98 to PIX not working [7:74521] Hello all. I have a problem with pptp to pix. Client has win98 machines on their network, all behind a DSL router. They connect via MS PPTP to my PIX box. The connection is fine, without errors. Problem is, they cannot do anything on my network. If they disconnect from their network, dial up to Internet, they connect fine and can do everything they should be expected to do. Windows 2000 and up machines seem to work fine, though. I am more than a little stumped. Below, please find a brief setup: client (192.168.0.x) - DSL Router - Internet - DSL Router - PIX )with live IP address on outside interface) (VPN Pool is 172.16.0.x) - Internal Network (10.1.1.x). vpdn group klr accept dialin pptp vpdn group klr ppp authentication pap vpdn group klr ppp authentication chap vpdn group klr ppp authentication mschap vpdn group klr client configuration address local klrpool vpdn group klr pptp echo 60 vpdn group klr client authentication local vpdn username some-name password some-password vpdn enable outside Any help would be muchly appreciated! Thanks! Michael Barnhart **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=74584t=74521 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: PPTP win98 to PIX not working [7:74521]
Sorry, I have that line but forgot to post it. The only thing I can think of, is that Win98 gets confused as to where to send the packets. It only has one default gateway (the one on the network adapter for the local network). I am curious how the TCP/IP Stack knows to send items destined for the network inside the VPN lan through the virtual adapter. Do I need manual router statements on the Win98 PC? Any ideas how to make them without knowing that IP address the PPTP adapter will get? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=74600t=74521 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Re: PPTP win98 to PIX not working [7:74521]
is there an mtu difference, causing dont fragment failures? Brian The path to a desireable destination is often more difficult than the path to stay where you are. On Fri, 29 Aug 2003, Michael Barnhart wrote: Hello all. I have a problem with pptp to pix. Client has win98 machines on their network, all behind a DSL router. They connect via MS PPTP to my PIX box. The connection is fine, without errors. Problem is, they cannot do anything on my network. If they disconnect from their network, dial up to Internet, they connect fine and can do everything they should be expected to do. Windows 2000 and up machines seem to work fine, though. I am more than a little stumped. Below, please find a brief setup: client (192.168.0.x) - DSL Router - Internet - DSL Router - PIX )with live IP address on outside interface) (VPN Pool is 172.16.0.x) - Internal Network (10.1.1.x). vpdn group klr accept dialin pptp vpdn group klr ppp authentication pap vpdn group klr ppp authentication chap vpdn group klr ppp authentication mschap vpdn group klr client configuration address local klrpool vpdn group klr pptp echo 60 vpdn group klr client authentication local vpdn username some-name password some-password vpdn enable outside Any help would be muchly appreciated! Thanks! Michael Barnhart **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=74523t=74521 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Re: PPTP win98 to PIX not working [7:74521]
I will take a look and see. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=74525t=74521 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
