grischast wrote:
Dear all I have a PIX 506 running Software 6.3(5) and configured it to accept PPTP VPN connections from outside. This works very well, PPTP users get a local IP address from the configured pool and can access inside hosts as expected. What I want now is that PPTP users can access the internet from here just like inside hosts via dynamic NAT to the outside interface. On ASA5505 this is achieved by same-security-traffic permit intra-interface and corresponding nat (outside) configuration (with IPsec-VPN-Clients, not PPTP, though). On the PIX with PPTP clients I cannot achieve this result. Is it possible somehow? Thanks a lot for any suggestion, Grischa
Grischa
Unfortunately no, you cannot do this on the pix 506 running v6.x. The reason is because the feature you need is called "hairpinning" which is enabled by using the "same-security-traffic permit intra-interface" command. But this is not available on pix v.6.x code.
It is available on pix v7.x code and onwards but unfortunately the pix 506 cannot be upgraded to v7.x code. The minimum pix model that can run v7.x code is a pix 515E.
Jon
