Solved

How to connect remote Windows XP clients to PIX 525  using Windows inbuilt VPN.

Posted on 2004-08-23
5
448 Views
Last Modified: 2010-04-12
I want to be able to configure Windows XP clients to be able to VPN to a Cisco PIX 525. Unfortunately the user community at this particular company are VERY computer illiterate and putting the Cisco VPN client in front of them may cause a heart attack. All the users have DSL and can cope with connecting their machines, and are also able to cope with the concept of double clicking a Windows DUN connection Icon.
I have sat in front of Google for a solution on using XP's built in VPN support, but there are so many results showing out of date or conflicting solutions. I just need the clients to be able to be able to browse the Windows network in the office. There is a Windows 2003 standard edition server there that runs AD and file sharing. What is the best solution and the best PIX configuration?

Thanks Guys

Kevin
0
Comment
Question by:kjorviss
  • 3
  • 2
5 Comments
 
LVL 36

Expert Comment

by:grblades
Comment Utility
0
 

Author Comment

by:kjorviss
Comment Utility
Hi

I saw that example, but what put me off that is I will never know what IP address the client will be assigned. Most of these remote workers just have standard DSL with DHCP assigned addresses from whatever ISP they are using. In addition to that the company has the PIX connected to a BellSouth DSL line with a static IP so the config is one public address that has all the outgoing connections via PAT on that address. Does that mean I could dispose of the router portion of the Cisco example and use the public IP on the outside interface of the PIX instead?

Thanks

Kevin
0
 
LVL 36

Accepted Solution

by:
grblades earned 500 total points
Comment Utility
Don't worry about the fact that the example shows the IP address of the client. This IP address is not specified anywhere in the configuration. They only list it so you can correlate it's IP address from the example 'debug' output.

The router in your case will be the router belinging to your DSL provider. You just put the public internet address on the outside of your PIX and put the default gateway in the 'route' command as in the example.
0
 

Author Comment

by:kjorviss
Comment Utility
Thanks for that, I can go to bed now! I thought that  a static client address was dependent on that example which is why I ignored it. So I can use the same address that is being used for the outgoing connections or would I use another free address from the ISP just for the PPTP connections?
0
 
LVL 36

Expert Comment

by:grblades
Comment Utility
For the pptp address pool you can use any private address range you like. I would avoid 192.168.0.x and 192.168.1.x as these are commonly used by home DSL routers and if you used these ranges it could cause problems. I would just pick a random number between 5 and 250 and use 192.168.random_num.0/255.255.255.0 as the address range.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
Overview Often, we set up VPN appliances where the connected clients are on a separate subnet and the company will have alternate internet connections and do not use this particular device as the gateway for certain servers or clients. In this case…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now