PIX PPTP, no NAT

2000-10-28 Thread Jim Bond
Hello, I'm trying to set up PIX PPTP without NAT but no success. Cisco gives a sample config using NAT http://www.cisco.com/warp/public/110/pptppix.html but I don't understand why they use 192.168.1.0. Here is my topology: 172.16.1.0/24(outside)---PIX---(inside)172.16.2.0/24 I create a pool 172.

Re: PIX PPTP, no NAT

2000-10-29 Thread Andrew
If you're setting up w/o nat why the pool? Also, you need 'NAT 0' to keep the in/out from getting a translation. At 07:00 PM 10/28/00 -0700, Jim Bond wrote: >Hello, > >I'm trying to set up PIX PPTP without NAT but no >success. Cisco gives a sample config using NAT >http://www.cisco.com/warp/pub

Re: PIX PPTP, no NAT

2000-10-29 Thread Jay Hennigan
On Sat, 28 Oct 2000, Jim Bond wrote: > Hello, > > I'm trying to set up PIX PPTP without NAT but no > success. Cisco gives a sample config using NAT > http://www.cisco.com/warp/public/110/pptppix.html but > I don't understand why they use 192.168.1.0. > > Here is my topology: > 172.16.1.0/24(out

Re: PIX PPTP, no NAT

2000-10-29 Thread Andrew
At 09:33 PM 10/29/00 -0800, Jay Hennigan wrote: >On Sat, 28 Oct 2000, Jim Bond wrote: > > > Hello, > > > > I'm trying to set up PIX PPTP without NAT but no > > success. Cisco gives a sample config using NAT > > http://www.cisco.com/warp/public/110/pptppix.html but > > I don't understand why they u

Re: PIX PPTP, no NAT

2000-10-29 Thread Vijay Venkatesh
You do not need a static statement. Are you using mppe for your pptp ? Is this PPTP on win 98 or win 2k ? Send me the config file ... oh and one more thing do not go by the docs on Cisco's web site they are wrong and TAC with all it's CCIEs is useless. Email me your config and I beleive I can hel

Re: PIX PPTP, no NAT

2000-10-30 Thread Andrew
A PIX -is- a router (firewall router.) Hence, ip route statements and the ability to run RIP. It's a box with two (or more) interfaces that connects networks. Granted, it's not a box you would use for 'normal' routing functions but to say the PIX is not a router is just wrong. Little off th

Re: PIX PPTP, no NAT

2000-10-30 Thread Jay Hennigan
On Sun, 29 Oct 2000, Andrew wrote: > >According to this, it looks like you should have NAT. You have a different > >network outside than inside. > > Don't all routers that are routing between networks? ;) The PIX is not > necessarily a NAT box. It performs statefull security for established

Re: PIX PPTP, no NAT

2000-10-30 Thread Jay Hennigan
On Mon, 30 Oct 2000, Andrew wrote: > A PIX -is- a router (firewall router.) Hence, ip route statements and the > ability to run RIP. It's a box with two (or more) interfaces that connects > networks. Granted, it's not a box you would use for 'normal' routing > functions but to say the PIX i

Re: PIX PPTP, no NAT

2000-10-30 Thread Andrew
The PIX absolutely has default route statements. 'ip route outside|inside' At 07:58 AM 10/30/00 -0800, Jay Hennigan wrote: >On Mon, 30 Oct 2000, Andrew wrote: > > > A PIX -is- a router (firewall router.) Hence, ip route statements and the > > ability to run RIP. It's a box with two (or more) i

Re: PIX PPTP, no NAT

2000-10-30 Thread Jay Hennigan
On Mon, 30 Oct 2000, Andrew wrote: > The PIX absolutely has default route statements. 'ip route outside|inside' True. My APC power strip has a default route statement, does that make it a router? If you try not to think of a PIX as a router, it will be a lot easier to understand. Yes, it m

Re: PIX PPTP, no NAT

2000-10-30 Thread Andrew
If your APC power strip had more than one interface and could route packets between the interfaces then 'yes.' At 09:44 AM 10/30/00 -0800, Jay Hennigan wrote: >On Mon, 30 Oct 2000, Andrew wrote: > > > The PIX absolutely has default route statements. 'ip route outside|inside' > >True. My APC po

Re: PIX PPTP, no NAT

2000-10-30 Thread Sam Munzani
Looks like we have conflct of definations here. Whatever everybody thinks about the device is not that important. The guy who posted message might be looking for an answer to his problem rather than learning defination of router. Rather than fighting over defination let's help him. Sam > If you

Re: PIX PPTP, no NAT

2000-10-30 Thread George Spahl
I don't think this is just splitting hairs, I think the question (what was it again??) is being answered. I think Jay's explanations have been right on target and are an aid in gaining an understanding of how the PIX works. I'm surprised it isn't on the lab exam yet. George At 12:19 PM 10/30/00

Re: PIX PPTP, no NAT

2000-10-30 Thread Sam Munzani
AIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, October 30, 2000 1:13 PM Subject: Re: PIX PPTP, no NAT > I don't think this is just splitting hairs, I think the question (what was > it again??) is being answered. I think Jay's explanations have been right > on targ

Re: PIX PPTP, no NAT

2000-10-30 Thread JKimes1
I'll agree that the PIX is a partial router, but just barely... It will not route to another router within your protected area... _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations

CCIE Security track - WAS: PIX PPTP, no NAT

2000-10-30 Thread Chuck Larrieu
the mere existence of a CCIE Security beta exam tells me that there will soon be a CCIE / Security track, in addition to the R&S, ISP, and WAN ( with the Design due Real Soon Now? ) No doubt PIX will figure heavly in this one. :-> Chuck George Spahl <[EMAIL PROTECTED]> wrote in message [EMAIL