ASA 映射内网pptp服务器 NAT-T给内网咋做？？

[sye5230]

ASA 映射pptp 映射 根据http://www.cisco.com/cisco/web/support/CN/107/1078/1078944_pix_pptp.html 中设置，
pptp服务在内网，client在外网，去连接无法连接，pptp服务在内网测试过，可以连接。
gre pptp -外网outside，内网inside，都为允许状态。


nat 为静态nat 转换为接口ip 能telnet通。。。

[pebao · Accepted solution]

这是一个配置实例
http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/18806-pix-pptp.html

[julianchen]

帮你把这个问题顶起来

[zhanghaolan]

顶起来吧，嘿嘿

[sye5230]

PPTP with the Client Outside and the Server Inside
Network Diagram
pix_pptp_02.gif
Note: The IP addressing schemes used in this configuration are not legally routable on the Internet. They are RFC 1918 addresses which have been used in a lab environment.
Commands to Add to All Versions
In this configuration example, the PPTP server is 192.168.201.5 (static to 10.48.66.106 inside), and the PPTP client is at 192.168.201.25 .
access-list acl-out permit gre host 192.168.201.25 host 192.168.201.5
access-list acl-out permit tcp host 192.168.201.25 host 192.168.201.5 eq 1723
static (inside,outside) 192.168.201.5 10.48.66.106 netmask 255.255.255.255 0 0
access-group acl-out in interface outside
最后还是按官方支持给做的ip全映射，如果没有多余的ip 那我该咋做呢？没有大神能解释下么？