cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
739
Views
5
Helpful
2
Replies

VPN GRE PPTP Error 721

art661022
Beginner
Beginner

I have a visitor who needs to connect to their VPN from our site. I have a Cisco 1720 12.xIOS with NAT to the internet. I have added this to my access-lists

access-list 101 permit tcp any eq 47 66.152.206.32 0.0.0.7

and

ccess-list 101 permit tcp any eq 2513 66.152.206.32 0.0.0.7

to open up port 47 (GRE) and 1723(PPTP)

ALSO

vpdn enable

!

vpdn-group 1

! Default PPTP VPDN group

accept-dialin

protocol pptp

virtual-template 1

what am I missing that will not allow this user to get to his VPN?

He gets an error 721.

2 Replies 2

mhussein
Enthusiast
Enthusiast

Hello,

GRE is ip protocol 47, it is not a tcp or udp port number. PPTP is tcp port 1723.

I think the access-list should be:

access-list 101 permit gre any x.x.206.32 0.0.0.7

access-list 101 permit tcp any eq 1723 x.x.206.32 0.0.0.7

HTH,

Mustafa

p.s. please remember to remove/mask public ip addresses and any other sensitive info.

I'll give it a try.

THANK YOU !!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers