Cisco PIX VPN Question

Posted on 2006-06-06
Last Modified: 2010-03-19

We have a Cisco PIX 501 and last night, I went through and attempted to create an PPTP VPN group to test remote access.  I selected MSCHAP for authentication and created a local user in the database.  I went home to try it and it wouldn't work but I know why!!!!  The default config on the PIX deny's all inbound connections.  I'm not much of a networking guy so I was wondering what access lists do I need to add to the PIX which will allow me to connect via PPTP (Microsoft) as well as the Cisco VPN client (I created one of those groups too).

Many the way, I don't have access to my config file right now which is why I can't post it.

Question by:msadexchman
    LVL 79

    Expert Comment

    You can enable PPTP with sysopt command that bypasses any inbound acls and permits the traffic:

     sysopt connect permit-pptp


    Author Comment

    Great!  Can I do something similar to allow me to use IPSEC and the Cisco VPN Client?
    LVL 79

    Accepted Solution

     sysopt connect permit-ipsec

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
    Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now