PPTP using Windows RRAS behind a 1801 ISR

[icesolutions]

Hi,

We have a Windows server with RRAS configured for dial in vpn and have just implemented a cisco 1801 Integrated Service Router with Advanced IP/Security bundle.

The router has port 1723 mapped to the local server private ip and were using NAT on the private network

Our users are able to connect to the public address but are unable to get past the verifying username and password stage to complete the vpn and get a 631 error.

I have read somewhere that the 1801 needs to have GRE configured for PPTP to terminate.

Does anybody know how to add this to the current configuration of our router?

*See attached config*

[rkazmierczak]

hi,

if possible configure static NAT rather than static PAT (PAR) and allow gre and pptp in the access-list

ip nat inside source static 192.168.1.10 76.6.6.6

ip access-list ext OUTSIDE_IN

permit gre any h 76.6.6.6

permit tcp any h 76.6.6.6 eq 1723

This should work :)