I don't think you need another IP address for this. A proper static NAT would be fine with 2 conduits each for PPTP and GRE. I have tested this on PIX and it works fine.
Your idea might work but it won't be reliable. The real solution to this is to have a STATIC NAT from your outside interface to the NT server directly. Once static mapping and you can pass both PPTP and GRE. If you don't have a fixed IP address on y...
Pre-shared keys are fine but not scalable. From my knowledge, if the key is compromised, it has to be changed immediately on all devices. A safe way is to sign-up with a CA. This was recommended by Cisco while I was designing our VPN. Well, the answe...
Sunny, there are too many considerations while designing a VPN. A combination of 2 solutions would give most features. In my design, a remote user can even get a drive mapping with forced Authentication and passing through all Address Translations. I...
Most VPN equipment manufacturers claim standard features like 3DES encryption, MD5/SHA_1 hash algorithm, DH or RSA Public/Private key exchange mechanisms. Very difficult to choose a product that satisfies all requirements. However, the following shou...