PPTP VPN 3000

[Natha340Mai340]

Hi everyone,

there is possible stablish more that one Tunnel VPN from one IP to vpn 3000 using the protcol PPTP??

because when my company's trevaler attempt to connect from the same IP ( valid Internet ) isn't work. for exemplo, when they every are inside any company ,wich, there is only a IP valid on Interne only one tunnel VPN is possible to VPN 3000

I need more that one connection from one IP to VPN 3000 using the protcol PPTP

there is possible ??

thank's

[Jennifer Halim · Accepted solution]

Yes, it is possible on the VPN3000 itself, however, most of times the problem lies on the network device that they pass through where they try to connect from. Some network device/firewall that they pass through does not support multiple PPTP connections. If they have an ASA firewall for example, then they would need to turn on PPTP inspection:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/i2.html#wp1721656

In summary, the problem does not lie on your VPN3000, but on the network where the PPTP connections are initiated from.

Hope that is clear.

[Natha340Mai340]

Thank for explanation but the error occur at the logs in my VPN3000 give me a messsenge "already a tunnel"

I have to do any thing in my VPN 3000?

maybe type that command told by you ?!?1

[Jennifer Halim]

Can you please share the full error message on the concentrator as well as the version of software that you are running on your vpn concentrator. Thanks.

[Natha340Mai340]

folow,

VPN Concentrator Type: 3005
Serial Number:CAM10442727
Bootcode Rev: Cisco Systems, Inc./VPN 3000 Concentrator Series Version 2.5.Rel Jun 21 2000 18:57:52
Software Rev: Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.Rel Mar 10 2005 14:58:16
Up For: 92d 9:33:54
Up Since: 09/12/2010 00:24:56
RAM Size: 64 MB (Memory Status: Green)

25895 12/13/2010 09:55:06.430 SEV=8 PPTPDBG/26 RPT=3358
pptp_create_ptcb: for 200.11.112.210

25896 12/13/2010 09:55:06.430 SEV=4 PPTP/33 RPT=424 200.11.112.210
PPTP tunnel for peer 200.11.112.210 denied - already established

25897 12/13/2010 09:55:06.430 SEV=8 PPTPDBG/24 RPT=6127
Close socket for (32810336)

25898 12/13/2010 09:55:09.380 SEV=4 CERT/31 RPT=29
Unable to complete certificate chain, reason = Incomplete certificate chain

25899 12/13/2010 09:55:09.390 SEV=4 IKE/48 RPT=29 200.11.112.210
Error processing payload: Payload ID: 9

thank's!