topic Re: basic pptp 501 6.3 in Network Security https://community.cisco.com/t5/network-security/basic-pptp-501-6-3/m-p/1126088#M895435 <HTML><HEAD></HEAD><BODY><P>fixup protocol pptp 1723</P></BODY></HTML> Tue, 07 Oct 2008 01:40:37 GMT abinjola 2008-10-07T01:40:37Z basic pptp 501 6.3 https://community.cisco.com/t5/network-security/basic-pptp-501-6-3/m-p/1126087#M895434 <P>I am attempting to permit a "inside" user who is assigned IP 10.0.0.5 to PPTP to an outside vendor's web server.</P><P>can I use "sysopt connection permit-pptp" by itself, or can I use "fixup on port 1723"?</P><P></P><P>thank you,</P><P>wr t</P><P>Building configuration...</P><P>: Saved</P><P>PIX Version 6.3(5)</P><P>interface ethernet0 auto</P><P>interface ethernet1 100full</P><P>nameif ethernet0 outside security0</P><P>nameif ethernet1 inside security100</P><P>enable password encrypted</P><P>passwd encrypted</P><P>hostname MJSFW</P><P>domain-name macejacobs.com</P><P>fixup protocol dns maximum-length 512</P><P>fixup protocol ftp 21</P><P>fixup protocol h323 h225 1720</P><P>fixup protocol h323 ras 1718-1719</P><P>fixup protocol http 80</P><P>fixup protocol rsh 514</P><P>fixup protocol rtsp 554</P><P>fixup protocol sip 5060</P><P>fixup protocol sip udp 5060</P><P>fixup protocol skinny 2000</P><P>fixup protocol smtp 25</P><P>fixup protocol sqlnet 1521 </P><P>fixup protocol tftp 69</P><P>names</P><P>access-list outside_access_in permit tcp any any eq 3389 </P><P>pager lines 24</P><P>icmp deny any outside</P><P>mtu outside 1500</P><P>mtu inside 1500</P><P>ip address outside "outside ip" 255.255.255.252</P><P>ip address inside 10.0.0.1 255.255.255.0</P><P>ip audit info action alarm</P><P>ip audit attack action alarm</P><P>pdm history enable</P><P>arp timeout 14400</P><P>global (outside) 10 interface</P><P>nat (inside) 10 10.0.0.0 255.255.255.0 0 0</P><P>static (inside,outside) tcp "outside ip" 3389 10.0.0.3 3389 netmask 255.255.255.255 0 0 </P><P>access-group outside_access_in in interface outside</P><P>route outside 0.0.0.0 0.0.0.0 "outside gateway" 1</P><P>timeout xlate 3:00:00</P><P>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00</P><P>timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00</P><P>timeout sip-disconnect 0:02:00 sip-invite 0:03:00</P><P>timeout uauth 0:05:00 absolute</P><P>no snmp-server location</P><P>no snmp-server contact</P><P>snmp-server community warn1ng</P><P>no snmp-server enable traps</P><P>floodguard enable</P><P>sysopt noproxyarp inside</P><P>telnet 10.0.0.3 255.255.255.255 inside</P><P>telnet timeout 5</P><P>ssh timeout 5</P><P>console timeout 0</P><P>terminal width 80</P><P>Cryptochecksum:</P><P>: end</P><P>[OK]</P><P>MJSFW(config)# </P><P></P><P></P> Mon, 11 Mar 2019 13:53:50 GMT https://community.cisco.com/t5/network-security/basic-pptp-501-6-3/m-p/1126087#M895434 ksvy_ksvy 2019-03-11T13:53:50Z Re: basic pptp 501 6.3 https://community.cisco.com/t5/network-security/basic-pptp-501-6-3/m-p/1126088#M895435 <HTML><HEAD></HEAD><BODY><P>fixup protocol pptp 1723</P></BODY></HTML> Tue, 07 Oct 2008 01:40:37 GMT https://community.cisco.com/t5/network-security/basic-pptp-501-6-3/m-p/1126088#M895435 abinjola 2008-10-07T01:40:37Z Re: basic pptp 501 6.3 https://community.cisco.com/t5/network-security/basic-pptp-501-6-3/m-p/1126089#M895436 <HTML><HEAD></HEAD><BODY><P></P><P>got it, thank you!</P></BODY></HTML> Tue, 07 Oct 2008 01:46:57 GMT https://community.cisco.com/t5/network-security/basic-pptp-501-6-3/m-p/1126089#M895436 ksvy_ksvy 2008-10-07T01:46:57Z