topic Re: VPN Connection in Network Security

VPN Connection

Cash2106 — Mon, 30 Nov 2020 07:38:52 GMT

Hi there,

Dear Technical team, i have configured vpn on windows server 2019, and i have created a access rule for specific ports in cisco asa, but whenever i am trying to connect to the vpn its giving me error and i am not able to login to the vpn dialup connection. the error i am getting is attached, please do check it and help me...

i have created the access rule as well in firewall which is given below

Re: VPN Connection

Cash2106 — Mon, 30 Nov 2020 09:08:00 GMT

Please help me.........

Re: VPN Connection

Rob Ingram — Mon, 30 Nov 2020 09:56:27 GMT

Do you have a static nat configured for your ADC-VPN-Machine object?

Provide your running configuration and the output of "show nat detail"

Re: VPN Connection

Cash2106 — Mon, 30 Nov 2020 10:18:28 GMT

@Rob Ingram yes NAT Rule is created, attached is a screen shot for it.

but PPTP use port number 1723 and one protocol 47 GRE, i have mentioned 1723 in the nat rule but i dont know how to add this 47 which is known as PPTP Pass through.

Re: VPN Connection

Rob Ingram — Mon, 30 Nov 2020 11:03:52 GMT

You've not provided the information I asked for.

Try this link as it seems to relate to what you are trying to do https://www.petenetlive.com/KB/Article/0000009

Re: VPN Connection

Cash2106 — Mon, 30 Nov 2020 11:21:49 GMT

@Rob Ingram in access rule, there is already a access rule added in which interface outside is selected which i created myself and also showed to you in the screen shot, do i need to leave it like that or delete it and do according to the link you have given to me ?

please do acknowledge, i can share the details you have asked me for but is it possible if i can hide the IP's and then share it with you. please acknowledge.

Re: VPN Connection

Cash2106 — Mon, 30 Nov 2020 11:28:32 GMT

@Rob Ingrami have configured all the steps mentioned in the link, but i am getting the same error 😞 ..

Re: VPN Connection

Cash2106 — Mon, 30 Nov 2020 11:58:32 GMT

@Rob Ingram when i have configured these two rules with internal interface, internet stopped working on the client machines so i had to delete them to keep the internet working. but the issue is sill not resolved, i am not able to connect the vpn 😞

Re: VPN Connection

MHM Cisco World — Mon, 30 Nov 2020 23:00:07 GMT

This vpn is pptp, if yes

do inspection pptp in asa global policy and see result.

Re: VPN Connection

Cash2106 — Tue, 01 Dec 2020 04:05:02 GMT

@MHM Cisco Worldi have done it but still i am not able to connect to the vpn, i have attached screen shots of my configuration, if you can check and tell me if i am doing it right or not please.

Re: VPN Connection

Cash2106 — Tue, 01 Dec 2020 12:20:02 GMT

@MHM Cisco World did you check the screenshots, if you there is anything i am doing wrong or needs to do more steps can you please explain it to me ...

Re: VPN Connection

MHM Cisco World — Wed, 02 Dec 2020 20:13:31 GMT

...

Re: VPN Connection

MHM Cisco World — Tue, 01 Dec 2020 13:40:33 GMT

steps to config with ASDM
https://www.petenetlive.com/KB/Article/0000009

Re: VPN Connection

Cash2106 — Wed, 02 Dec 2020 06:58:18 GMT

@MHM Cisco Worldi have already done these steps exactly mentioned in this article, but unfortunately my internet stopped working on all the client machines, so i had to revert these settings back 😞

Re: VPN Connection

MHM Cisco World — Wed, 02 Dec 2020 20:05:05 GMT

...

Re: VPN Connection

Cash2106 — Wed, 02 Dec 2020 15:53:30 GMT

@MHM Cisco Worldas i know shouldnt it be the machine IP on which VPN is configured, i mean if i put it here the outside interface then where my request will go ?

Re: VPN Connection

MHM Cisco World — Wed, 02 Dec 2020 20:05:20 GMT

....

Re: VPN Connection

Cash2106 — Wed, 02 Dec 2020 16:20:01 GMT

@MHM Cisco World so these settings are okay i just have to mentioned outside interface instead of the local machine IP rest these settings are okay to go ? am i right ?

Re: VPN Connection

MHM Cisco World — Wed, 02 Dec 2020 21:08:36 GMT

sorry for late reply BUT ASDM is so hard to explain than CLI, this is why some mistake and other not reply soon.
So friend we will take Step by Step
1- ACL with GRE

2-ACL with TCP pptp

3- inspect PPTP

Re: VPN Connection

MHM Cisco World — Wed, 02 Dec 2020 21:11:42 GMT

Part 2
config the Port Forward for TCP PPTP here the issue I think after I make double Look

NOW instead of real port http we will select PPTP.
try this config
and Hope this help you.