I'm trying to configure a Cisco 837 ADSL Router to allow PPTP pass-through for a VPN connection to Win Server 2003 SBS.
I've had a few stabs at it (all unsuccessful). I understand that I need to open up ports 1723 and allow Protocol 47 gre, but I am new to Cisco IOS and it's giving me a bad headache!!
Looking at other posts i've added the following:
(Dialer1)
ip access-group 110 in
access-list 110 permit gre any any
access-list 110 permit tcp any any eq 1723
With these additions the router does not allow normal traffic though.
Please help Im getting desperate so this is a 500 pointer
This is my current configuration:
Current configuration : 2492 bytes
!
version 12.3
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
!
username CRWS_Shashi privilege 15 password 7 xxxxxxxx
username CRWS_Venky privilege 15 password 7 xxxxxxxxxxx
no aaa new-model
ip subnet-zero
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool CLIENT
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
lease 0 2
!
!
ip audit notify log
ip audit po max-events 100
ip ssh break-string
no ftp-server write-enable
no scripting tcl init
no scripting tcl encdir
!
!
!
no crypto isakmp enable
!
partition flash 2 10 2
!
!
!
interface Ethernet0
ip address 10.10.10.1 255.255.255.0
at inside
ip tcp adjust-mss 1452
hold-queue 100 out
interface ATM0
no ip address
atm vc-per-vp 64
no atm ilmi-keepalive
pvc 0/38
pppoe-client dial-pool-number 1
dsl operating-mode auto
!
interface FastEthernet1
address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
o ip address
duplex auto
speed auto
!
interface Dialer1
ip address negotiated
ip access-group 110 in
ip mtu 1492
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer remote-name redback
dialer-group 1
no cdp enable
pp authentication pap chap callin
ppp chap hostname xxxxxx@adsl.eclipse.co.uk
ppp chap password 7 xxxxxxxxxx
ppp pap sent-username xxxxxxxx@adsl.eclipse.co.u
k password xxxxxxxxx
1
ppp ipcp dns request
ppp ipcp wins request
!
ip nat inside source list 102 interface Dialer1 overload
lassless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
no ip http secure-server
!
!
access-list 102 permit ip 10.10.10.0 0.0.0.255 any
access-list 110 permit gre any any
access-list 110 permit tcp any any eq 1723
dialer-list 1 protocol ip permit
!
control-plane
-More--
!
line con 0
exec-timeout 120 0
no modem enable
transport preferred all
transport output all
stopbits 1
line aux 0
transport preferred all
ansport output all
line vty 0 4
access-class 23 in
exec-timeout 120 0
login local
length 0
transport preferred all
transport input all
transport output all
!
scheduler max-task-time 5000
end
