VPN GRE PPTP Error 721

[art661022]

I have a visitor who needs to connect to their VPN from our site. I have a Cisco 1720 12.xIOS with NAT to the internet. I have added this to my access-lists

access-list 101 permit tcp any eq 47 66.152.206.32 0.0.0.7

and

ccess-list 101 permit tcp any eq 2513 66.152.206.32 0.0.0.7

to open up port 47 (GRE) and 1723(PPTP)

ALSO

vpdn enable

!

vpdn-group 1

! Default PPTP VPDN group

accept-dialin

protocol pptp

virtual-template 1

what am I missing that will not allow this user to get to his VPN?

He gets an error 721.

[mhussein]

Hello,

GRE is ip protocol 47, it is not a tcp or udp port number. PPTP is tcp port 1723.

I think the access-list should be:

access-list 101 permit gre any x.x.206.32 0.0.0.7

access-list 101 permit tcp any eq 1723 x.x.206.32 0.0.0.7

HTH,

Mustafa

p.s. please remember to remove/mask public ip addresses and any other sensitive info.

[art661022]

I'll give it a try.

THANK YOU !!