06-19-2006 10:34 AM
I configured my pix 501 to receive incoming vpn and works perfect however if the site I'm triyin to conet from also has a pix 501 It will not conect.
when both places have a pix the connection will not work. Any help is appreciated.
Solved! Go to Solution.
07-22-2006 06:12 PM
You say you configured your pix for incommming vpn connection, what kind of connection? From vpn software clients? From hardware clients? From another PIX? Concentrator? If you would provide a little more information I would be happy to provide configuration help.
06-19-2006 11:36 AM
what error mesage it is giving...there may be the problem of the authentication or may be parameter missmatch...
so please give the full discription to troublshoot...
regards
Devang
06-20-2006 05:13 AM
The error mesage Im receiving is , error 721: The remote computerdid not respond.
Thanks
06-20-2006 08:42 AM
Error 721: Remote PPP peer or computer is not responding. If you have tried many thing other people suggest like rebooting, reloading hardware and re-installing the VPN or dial in connection, you still get the same problem. I will suggest to check the router settings and make sure TCP Port 1723, IP Protocol 47 (GRE) are opened. Also make sure that the router has the PPTP enabled and not firewall block the traffic. On the RAS server, check the DHCP settings
hope this will help you
rate this post if it helps
regards
Devang
07-22-2006 06:12 PM
You say you configured your pix for incommming vpn connection, what kind of connection? From vpn software clients? From hardware clients? From another PIX? Concentrator? If you would provide a little more information I would be happy to provide configuration help.
07-27-2006 08:58 AM
I think I understand what you are saying is that if you are behind a PIX501 and trying to create a VPN tunnel to your PIX501, you are unable to do so.
On your pix, enter the following command
crypto isakmp nat-traversal 30
Easiest way to describe what this does is that it will allow your PIX501 to establish a VPN tunnel with your remote system when the remote system is NAT'd behind another firewall, such as another PIX501.
07-28-2006 09:04 AM
I think you are close to the ansewer. let me explain better to see if you can help.
in usvi I have a pix 501 installed. i configure it to receive incoming vpn from portable computer at my home. to conect to the pix i go to windows in my home and configured a vpn conection using windos xp i provide windows xp with the pix 501 fix ip and the user and password i configured in the pix 501. when i select the connection it works exellent.
now, when i take my personal computer that has windows configured and conect to a lan that has a pix protecting it that same connection that was working from my home will not conect it guives me an error 721. it the computer im trying to connect is not responding. i enter the line you sugested on on the pix that is not at usvi and still not able to connect. I understand the problem is not at the pix that i'm triying to connect but the one i'm originating the coonection because if I dont have a pix connected I'm able to conect to the pix at usvi. hope you undestand and can provide another command line that i can enter that might let me do the task, thanks to all that had taken the time to make sugestion that might help.
07-28-2006 08:30 PM
On the PIX that you are connecting from, not usvi
pixfirewall(config)#fixup protocol pptp 1723
07-31-2006 04:15 AM
potterc4660: Sir thank you! Greatly apreciate your help. Work perfect. Now I'm able to connect trough the pix. Yesss!!! Thanks also to all.
07-31-2006 12:42 PM
no problem
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide