07-26-2008 01:02 PM - edited 02-21-2020 03:51 PM
I have a little problem with remote access vpn using PPTP on a PIX 506E firewall. Actually i have a site-to-site vpn setup on the pix that connects to an ASA on the other side. When i tried to configure remote access PPTP vpn on the PIX, the clients can actually connect but cannot access the internal network behind the PIX. Cannot ping any machines inside, cannot access any server inside. I am attaching the PIX config, please help me out.
Regards,
Nawaz
07-26-2008 01:14 PM
use another ip addresses for the pool.
no ip local pool pptp-pool 192.168.10.1-192.168.10.25
ip local pool pptp-pool 192.168.11.1-192.168.11.25
07-27-2008 12:20 AM
Thanks for your prompt message alekseev. I want to ask however why should i change the address pool. Since i have used this one and have included the range in nonat. Could you please explain why i need to change these so that in the future i dont make the same mistake.
Thanks in advance.
07-26-2008 01:17 PM
access-list NO-NAT permit ip 128.1.176.0 255.255.240.0 192.168.1.0 255.255.255.0
access-list NO-NAT permit ip 128.1.176.0 255.255.240.0 192.168.10.0 255.255.255.0
access-list NO-NAT permit ip 128.1.176.0 255.255.240.0 192.168.11.0 255.255.255.0
nat (inside) 0 access-list NO-NAT
07-27-2008 12:28 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide