Allowing VPN3000 to x-authenticate NT users across a Pix

[m.laporta]

Hi Experts.

I have the following scenario:

NT Server

|

|

(in)

[PIX](dmz)---(in)[VPN3000](out)

(out)

_|______________________|__

Internet

(Both the Pix and the VPN3000 have the outside interface connected to the Internet).

Well, I need to allow the VPN3000 to x-autenticate users using the NT database.

Could someone please tell me what are the protocols/port to open on the Pix?

Thanks

michele

[scoclayton]

Michele,

Good question. Unfortunately, I have no idea. I would assume that it would be the usual MS suspects (TCP/UDP 135-139) but that is just a guess. My suggestion would be to turn syslogging to debug level and try an authentication from the 3K. Then look at the logs and see what the PIX denied. Sorry I can't be of more help.

Scott