topic PPTP redirection through a pat interface on a PIX in Network Security

PPTP redirection through a pat interface on a PIX

Patrick Laidlaw — Fri, 21 Feb 2020 06:45:06 GMT

Is it possible to redirect PPTP traffic comming to the outside interface of a PIX that has a single IP or do you actually have to have an entire IP address translated for the PPTP termination Device.

Example I have a PIX with a single public ip address that I currently redirect ports 23 25 53 110 to a 2k server internally. Would I be able to redirect pptp traffic to that server also or will I have problems with gre and need an additional ip address?

Patrick Laidlaw

Re: PPTP redirection through a pat interface on a PIX

gfullage — Tue, 20 May 2003 08:00:59 GMT

The GRE will cause you problems. PPTP uses both GRE (IP protocol 47) and TCP port 1723. You'll be able to redirect the TCP/1723 traffic, but not the GRE.

To do this, you'll need another separate IP address.

Re: PPTP redirection through a pat interface on a PIX

Patrick Laidlaw — Tue, 20 May 2003 18:33:29 GMT

Thanks I came to the same conclusion but wanted someone to reconfirm.