topic Re: PPTP users over IPsec in Network Security https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488091#M707227 <HTML><HEAD></HEAD><BODY><P>by the way the latest and the max you can go for PIX is 8.04</P></BODY></HTML> Wed, 04 Aug 2010 10:51:10 GMT Jitendriya Athavale 2010-08-04T10:51:10Z PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488084#M707220 <P><SPAN style="color: #0a472d; font-family: tahoma,arial,helvetica,sans-serif;">Dear Experts,<BR />Please refer the attached scenario.</SPAN></P><P><SPAN style="color: #0a472d; font-family: tahoma,arial,helvetica,sans-serif;">I have formed an IP sec Tunnel and advertised the LAN subnets &amp; its working fine.<BR />But i have another requirement<BR />External users are connected to site A pix using pptp vpn and once they connected they will get ip range of 192.168.5.1-5.100.My requirement is these subnets 192.168.5.x has to access site B's LAN subnets (10.2.2.0/24) Is this possible, If so what configurations i have to do on PIX. Please help me!<BR />Thanks,<BR />Pramod</SPAN></P> Mon, 11 Mar 2019 18:20:43 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488084#M707220 pramod 2019-03-11T18:20:43Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488085#M707221 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Please try the following:</P><P></P><P>-- Add a nonat rule for traffic from 192.168.5.x subnet to 10.2.2.x subnet</P><P>-- Add the crypto access-list for traffic from 192.168.5.x subnet to</P><P>10.2.2.x subnet</P><P></P><P>-- Add a nonat rule for traffic from 10.2.2.x subnet to 192.168.5.x subnet</P><P></P><P>http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration</P><P>_example09186a00804675ac.shtml</P><P></P><P>Hope this helps.</P><P></P><P>Regards,</P><P></P><P>NT</P></BODY></HTML> Wed, 04 Aug 2010 04:24:12 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488085#M707221 Nagaraja Thanthry 2010-08-04T04:24:12Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488086#M707222 <HTML><HEAD></HEAD><BODY><P>you will need to do u turning too</P><P></P><P>since u have a pix can you plz mention the version u r running, as on pix on certain versions u turning is not supported</P></BODY></HTML> Wed, 04 Aug 2010 07:29:50 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488086#M707222 Jitendriya Athavale 2010-08-04T07:29:50Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488087#M707223 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: #0000ff; font-family: tahoma,arial,helvetica,sans-serif; background-color: #f8fafd;">The version currently running is "Cisco PIX Firewall Version 6.3(4)"</SPAN></P></BODY></HTML> Wed, 04 Aug 2010 10:01:28 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488087#M707223 pramod 2010-08-04T10:01:28Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488088#M707224 <HTML><HEAD></HEAD><BODY><P>in that case you will not be able to do u turning or hair pinning</P><P></P><P>so i guess we will have to figure out a way around</P></BODY></HTML> Wed, 04 Aug 2010 10:28:28 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488088#M707224 Jitendriya Athavale 2010-08-04T10:28:28Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488089#M707225 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-family: tahoma,arial,helvetica,sans-serif;">will version upgrade of 7.3 will fix ?</SPAN></P><P><SPAN style="font-family: tahoma,arial,helvetica,sans-serif;">Hardware:&nbsp;&nbsp; PIX-515E, 128 MB RAM, CPU Pentium II 464 MHz !!!</SPAN></P></BODY></HTML> Wed, 04 Aug 2010 10:48:24 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488089#M707225 pramod 2010-08-04T10:48:24Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488090#M707226 <HTML><HEAD></HEAD><BODY><P>i would suggest that you go the latest code for PIX here is the doc which will help you</P><P></P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml</A></P></BODY></HTML> Wed, 04 Aug 2010 10:50:37 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488090#M707226 Jitendriya Athavale 2010-08-04T10:50:37Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488091#M707227 <HTML><HEAD></HEAD><BODY><P>by the way the latest and the max you can go for PIX is 8.04</P></BODY></HTML> Wed, 04 Aug 2010 10:51:10 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488091#M707227 Jitendriya Athavale 2010-08-04T10:51:10Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488092#M707228 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-family: tahoma,arial,helvetica,sans-serif;">Note PPTP users are connected to</SPAN></P><P> Site A using PIX outside interface from the internet cloud!!!</P></BODY></HTML> Wed, 04 Aug 2010 11:20:19 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488092#M707228 pramod 2010-08-04T11:20:19Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488093#M707229 <HTML><HEAD></HEAD><BODY><P>yes i understand so u have pptp and site site terminating on the same interface right</P></BODY></HTML> Wed, 04 Aug 2010 11:32:42 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488093#M707229 Jitendriya Athavale 2010-08-04T11:32:42Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488094#M707230 <HTML><HEAD></HEAD><BODY><P>yes, u r right !!!</P></BODY></HTML> Wed, 04 Aug 2010 11:34:17 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488094#M707230 pramod 2010-08-04T11:34:17Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488095#M707231 <HTML><HEAD></HEAD><BODY><P>yup so you cant do it with the current version of PIX</P></BODY></HTML> Wed, 04 Aug 2010 11:36:07 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488095#M707231 Jitendriya Athavale 2010-08-04T11:36:07Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488096#M707232 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Code version above 7.2(4) will work and you will be able to do the U-turn.</P><P></P><P>Hope this helps.</P><P></P><P>Regards,</P><P></P><P>NT</P></BODY></HTML> Wed, 04 Aug 2010 13:12:02 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488096#M707232 Nagaraja Thanthry 2010-08-04T13:12:02Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488097#M707233 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-family: tahoma,arial,helvetica,sans-serif;">Ok, think if i replace the pptp with site to reamote access vpn for site A,(users connecting from outside <BR />{internet} )... then if i need to access LAN subnets in site B, still we need u turning ? or any other mechanism to work ?</SPAN></P></BODY></HTML> Thu, 05 Aug 2010 04:52:21 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488097#M707233 pramod 2010-08-05T04:52:21Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488098#M707234 <HTML><HEAD></HEAD><BODY><P>you will still need it... in any case i would still recommend you upgrade because 6.3 is a ancient code which is soon going into the books and you dont want to play catching up <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/images/emoticons/happy.gif"></SPAN>...</P><P></P><P>u turning is just one small feature that you get in newer code, one of the most important tool that i personally find the most useful as tac engg is packet tracer,</P><P></P><P>as such the structure of the code is new and diff compared to 6.3</P><P>..</P></BODY></HTML> Thu, 05 Aug 2010 06:04:36 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488098#M707234 Jitendriya Athavale 2010-08-05T06:04:36Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488099#M707235 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-family: tahoma,arial,helvetica,sans-serif;">Ok <SPAN __jive_emoticon_name="wink" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/images/emoticons/wink.gif"></SPAN> hey i can see the below wording in this link</SPAN></P><P><SPAN style="font-family: Tahoma;"><SPAN style="color: #333399;">"Ensure the PIX does not terminate Point to Point Tunneling Protocol (PPTP) connections. PIX 7.1 and later does not currently support PPTP termination"</SPAN> </SPAN></P><P><SPAN style="font-family: Tahoma;"><A href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml</A></SPAN></P><P><SPAN style="font-family: tahoma,arial,helvetica,sans-serif;">can you comment what exactly ?</SPAN></P><P><SPAN style="font-family: Tahoma;"> </SPAN></P></BODY></HTML> Thu, 05 Aug 2010 06:37:23 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488099#M707235 pramod 2010-08-05T06:37:23Z Re: PPTP users over IPsec https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488100#M707236 <HTML><HEAD></HEAD><BODY><P>Yes asa does not support pptp termination it supports pptp pass through</P><P></P><P>Thanks and Regards,</P><P></P><P>Jitendriya Athavale</P><P>Cisco Systems Inc. - Security</P><P>Asia Pacific Technical Assistance Centre</P><P>Email : jathaval@cisco.com</P><P>Phone : +1 408 434 3210</P><P>Working hours: </P><P>Sunday - Thursday, 8pm - 2am US EDT</P><P>Tuesday - Saturday, 10am - 4pm Australia EST</P><P></P><P>TAC Worldwide contacts: http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html</P></BODY></HTML> Thu, 05 Aug 2010 06:47:41 GMT https://community.cisco.com/t5/network-security/pptp-users-over-ipsec/m-p/1488100#M707236 Jitendriya Athavale 2010-08-05T06:47:41Z