04-30-2004 06:51 PM - edited 03-02-2019 03:24 PM
PIX525 configure PPTP to allow remote user dial at VPN.PIX configure :
vpngroup vpn3000 address-pool vpnpool
vpngroup vpn3000 dns-server 192.168.0.20
vpngroup vpn3000 wins-server 192.168.0.20
vpngroup vpn3000 default-domain vvgroup.com
vpngroup vpn3000 idle-time 1800
vpngroup vpn3000 password ********
telnet timeout 5
ssh timeout 5
console timeout 0
vpdn group 1 accept dialin pptp
vpdn group 1 ppp authentication pap
vpdn group 1 ppp authentication chap
vpdn group 1 ppp authentication mschap
vpdn group 1 ppp encryption mppe 40
vpdn group 1 client configuration address local vpnpool
vpdn group 1 pptp echo 60
vpdn group 1 client authentication local
vpdn username vpn3000 password ********
=================================================
But remote user can't dial,Pix525 debug Information:
PPP virtual access open, ifc = 0
Rcvd Link Control Protocol pkt, Action code is: Config Request, len is: 40
Pkt dump: 0506211b4a25070208020d03061104064e13170192aa794627b4429782e118acc76cb5f30000000d
LCP Option: MAGIC_NUMBER, len: 6, data: 211b4a25
LCP Option: PROTOCOL_HDR_COMPRESSION, len: 2, data:
LCP Option: ADDRESS_CONTROL_COMPRESSION, len: 2, data:
LCP Option: CALL_BACK, len: 3, data: 06
LCP Option: MULTI_LINK_RCV_UNIT, len: 4, data: 064e
LCP Option: END_POINT_DISCOVERY, len: 23, data: 0192aa794627b4429782e118acc76cb5f30000000d
Xmit Link Control Protocol pkt, Action code is: Config Request, len is: 11
Pkt dump: 0305c223800506201af976
LCP Option: AUTHENTICATION_TYPES, len: 5, data: c22380
LCP Option: MAGIC_NUMBER, len: 6, data: 201af976
Xmit Link Control Protocol pkt, Action code is: Config Reject, len is: 34
Pkt dump: 070208020d03061104064e13170192aa794627b4429782e118acc76cb5f30000000d
LCP Option: PROTOCOL_HDR_COMPRESSION, len: 2, data:
LCP Option: ADDRESS_CONTROL_COMPRESSION, len: 2, data:
LCP Option: CALL_BACK, len: 3, data: 06
LCP Option: MULTI_LINK_RCV_UNIT, len: 4, data: 064e
LCP Option: END_POINT_DISCOVERY, len: 23, data: 0192aa794627b4429782e118acc76cb5f30000000d
Rcvd Link Control Protocol pkt, Action code is: Config Request, len is: 40
Pkt dump: 0506211b4a25070208020d03061104064e13170192aa794627b4429782e118acc76cb5f30000000d
LCP Option: MAGIC_NUMBER, len: 6, data: 211b4a25
LCP Option: PROTOCOL_HDR_COMPRESSION, len: 2, data:
LCP Option: ADDRESS_CONTROL_COMPRESSION, len: 2, data:
LCP Option: CALL_BACK, len: 3, data: 06
LCP Option: MULTI_LINK_RCV_UNIT, len: 4, data: 064e
LCP Option: END_POINT_DISCOVERY, len: 23, data: 0192aa794627b4429782e118acc76cb5f30000000d
Xmit Link Control Protocol pkt, Action code is: Config Reject, len is: 34
Pkt dump: 070208020d03061104064e13170192aa794627b4429782e118acc76cb5f30000000d
LCP Option: PROTOCOL_HDR_COMPRESSION, len: 2, data:
LCP Option: ADDRESS_CONTROL_COMPRESSION, len: 2, data:
LCP Option: CALL_BACK, len: 3, data: 06
LCP Option: MULTI_LINK_RCV_UNIT, len: 4, data: 064e
LCP Option: END_POINT_DISCOVERY, len: 23, data: 0192aa794627b4429782e118acc76cb5f30000000d
Xmit Link Control Protocol pkt, Action code is: Config Request, len is: 11
Pkt dump: 0305c223800506201af976
LCP Option: AUTHENTICATION_TYPES, len: 5, data: c22380
LCP Option: MAGIC_NUMBER, len: 6, data: 201af976
Rcvd Link Control Protocol pkt, Action code is: Config Request, len is: 40
Pkt dump: 0506211b4a25070208020d03061104064e13170192aa794627b4429782e118acc76cb5f30000000d
LCP Option: MAGIC_NUMBER, len: 6, data: 211b4a25
LCP Option: PROTOCOL_HDR_COMPRESSION, len: 2, data:
LCP Option: ADDRESS_CONTROL_COMPRESSION, len: 2, data:
LCP Option: CALL_BACK, len: 3, data: 06
LCP Option: MULTI_LINK_RCV_UNIT, len: 4, data: 064e
LCP Option: END_POINT_DISCOVERY, len: 23, data: 0192aa794627b4429782e118acc76cb5f30000000d
===================================================
Please tell me why?
Thanks
05-06-2004 02:09 PM
Try this link for troubleshooting PPTP, use debugs and Isolate the problem.
http://www.cisco.com/en/US/tech/tk827/tk369/technologies_q_and_a_item09186a00800946ef.shtml
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: