topic Re: PPTP VPDN Error in Network Security

PPTP VPDN Error

vinoth.kumar — Mon, 11 Mar 2019 14:34:03 GMT

Hi,

we are using PIX 6.3 (5)and i a have configured the PPTP connection but i am getting the error in my PIX term mon when i try to connect from my remote PC

the config as follows:

access-list 101 permit ip 10.0.0.0 255.0.0.0 172.16.16.0 255.255.255.240

ip local pool PPTPVPNpool 172.16.16.1-172.16.16.14

vpdn group 1 accept dialin pptp

vpdn group 1 ppp authentication pap

vpdn group 1 ppp authentication chap

vpdn group 1 ppp authentication mschap

vpdn group 1 client configuration address local PPTPVPNpool

vpdn group 1 pptp echo 60

vpdn group 1 client authentication local

vpdn username admin password *********

vpdn enable outside

Can i know why the error is coming

Note : can i work with WINDOWS VISTA also

Regards,

Vinoth

Re: PPTP VPDN Error

Parminder Sian — Thu, 08 Jan 2009 09:13:32 GMT

Hi Vinoth,

What exact error message are you getting while connecting. Here a link that might be helpful for you.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080143a5d.shtml

Regards

Parminder Sian

Re: PPTP VPDN Error

vinoth.kumar — Thu, 08 Jan 2009 09:15:20 GMT

Thanks for your reply

error msg is :

402106: Rec'd packet not an IPSEC packet. (ip) dest_addr= x.x.0.3, src_addr=

x.x.37.82, prot= tcp

Re: PPTP VPDN Error

Parminder Sian — Thu, 08 Jan 2009 09:25:37 GMT

Please check if you have following in your config :-

nat (inside) 0 access-list 101

sysopt connection permit-pptp

And regarding your question on PPTP with Windows Vista. PIX version 6.x only support MS-CHAP v1.0 and Windows Vista does not support version 1.0 of MSCHAP, so probably it wont work.

Regards

Parminder

Re: PPTP VPDN Error

vinoth.kumar — Thu, 08 Jan 2009 09:36:27 GMT

ok thanks

nat (inside) 0 access-list 101

sysopt connection permit-pptp

i have already given the above commands but still the error is coming

Regards,

Vinoth

Re: PPTP VPDN Error

Parminder Sian — Thu, 08 Jan 2009 09:38:57 GMT

Vinoth,

Would it be possible to see the complete config of your firewall and network diagram if possible.

Also are you trying to terminate VPN client on your pix as well, as the log message is for IPSEC traffic not PPTP.

If yes then please configure different ip pools for vpn client and PPTP

Regards

Parminder Sian