pptp thorugh two Cisco pix inline

Posted on 2006-04-25
Last Modified: 2013-11-16
I want to set up two Cisco Pix 501 in line.  One Pix has  INT0 on the internet. INT1 is in the DMZ.  The next pix has INT0 in the DMZ and Int1 on the inside Network.  I have access from Private to DMZ and Private to Public.  I have access from the public to www/smtp in the DMZ.  What I would like to figure out is to get pptp access. I want to use the inside pix with radius back to a W2K3 server.  This is not production.  This is lab.  Never the less it has been bugging me for some time.  Watching syslog i can see that I am not getting packets to the DMZ int on the inside pix.  I am assuming that it is a translation issue.  Also I keep getting a no route from Destination to Source error from the outside pix.
Question by:thinnet
    LVL 16

    Accepted Solution

    Since this is a lab and not production, may I assume you have some time to explore potential ideas without annoyong anyone by inadvertently breaking things?

    If so, I'd put the pptp server in the DMZ, get that working, and then put it on the inside network, and get it working there.

    What I'm getting at is that if you can get it to work through one PIX, then you should be able to get it to work through two PIXs.  Putting the pptp server in the DMZ is an easy way to isolate your configuration issues to one PIX, initially.


    Author Comment

    I was trying to use the inside pix as the pptp server and radius to the W2K3 server for authentication
    LVL 16

    Expert Comment

    >I was trying to use the inside pix as the pptp server and radius to the W2K3 server for authentication

    That's fine, but you can certainly test that it's working behind a single pix before you put it behind two, yes?  Problems like this are much easier to solve when you eliminate as many variables as possible.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
    Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now