IPSEC and PPTP on same PIX?

[ajohnson]

Is this possible? I currently have a IPSEC remote vpn configuration that is working fine.

I am now needing to add PPTP support to the PIX 6.3(4).

I have followed the Cisco PPTP configuation. I can get the PPTP connection fine, but if I try to ping inside hosts it fails, using "debug icmp trace" I see the packets coming into the PIX but nothing ever comes back. I am using the same IP pool as the IPSEC clients so the "nat 0" command is already in place to no nat for these IP's. Host firewalls are of course turned off, so that wouldnt be a problem.

Any ideas or suggestions?

Thanks.

[rajimish]

Hello,

I believe this is what you are lookign for:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080093f89.shtml

Check your config once more, most likely you have missed the sysopt connection permit-pptp on your firewall configuration.

Thanks!

[ajohnson]

The sysopt connection permit-pptp is already there. I failed to mention that in my post.

[Philip D'Ath]

This is definately possible. I've done it many times.

I assume IPSec clients can do the ping you mention okay?

Could you post your config?

[ajohnson]

I was able to get this resolved. I had to create a unique IP pool just for the PPTP users. They couldnt share the same IP pool as IPSEC clients. As soon as I changed the pool a PPTP connection was able to ping inside hosts.

Yes IPSEC users can ping the hosts.