• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 314
  • Last Modified:

VPN/PPTP: PIX Firewall doesn't respond to Windows "Configuration Request"

Hi there!

I want to set-up a VPN for the company I work for. Our developers should be able to access our office LAN from home via VPN with their Windows PCs. The office is secured by a Cisco PIX Firewall 6.2(2) which I configured to accept PPTP connections. (I have no activation key for the firewall for 3DES, so I cannot use the Cisco VPN Client.)

In my Windows I made a new dial-up connection to our firewall. When connecting the following happens (Ethereal trace):

1. Windows tries to open a PPTP connection to the PIX firewall.
2. The firewall accepts the connection.
3. A "Start-Control-Connection-Request"/"Outgoing-Call-Request" is answered by the PIX.
4. Windows sends a "Configuration-Request" which isn't answered by the firewall.

Windows keeps sending the configuration requests but the PIX (which receives the packets) wouldn't respond.

Can anyone help me?

Thanks,
wssdbd

0
wssdbd
Asked:
wssdbd
1 Solution
 
grbladesCommented:
Here is a link to some configuration examples so you can check your configuration.
PIX configuration examples - http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_configuration_examples_list.html

The Cisco VPN client can use the basic DES encryption so you can use it.
You can obtain a free 3des/aes activation key from https://www.cisco.com/pcgi-bin/Software/Crypto/crypto_main.pl?prod_refer=pix3des
0
 
wssdbdAuthor Commented:
Thanks for the link to the free activation key. I obtained it and will change the PIX configuration tomorrow.
0

Featured Post

Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now