MS-VPN client(PPTP) behind of PIX not works through PIX

[cjrchoi11]

I have problem the MS-VPN client through PIX firewall.

inside(MS-VPN client)--PIX--(public segment)--Internet--MS VPN server

PIX code 6.3(4) and configued as follows.

fixup protocol pptp 1723

sysopt connection permit-pptp

access-list 100 permit ip any any

acccess-list 100 permit gre any any

--> apply 100 into "outside" interface(fixup protocol will be enough but I applied to make sure)

1. VPN client put on the public segment and works

2. VPN client put on the internal segment and PAT in the PIX. not works.

3. VPN client put on the interal segment and static NAT with same public IP address which used in the step 1. not works.

why the MS-VPN client not works through PIX firewall. Any idea ?

Thanks,

[supertoaster2]

You should remove the ip any any straight-away.

You should do a static translation of the public ip addres to the private ip address of the vpn server, i.e,

static (inside,outside) outside_ip inside_ip netmask 255.255.255.255

Also you should check that the vpn client is working from the inside, before looking at the pix.