troubleshooting Question

Confirming PPTP configuration on ASA 5510

Avatar of jasonwilliams74
jasonwilliams74 asked on
Software FirewallsCiscoHardware Firewalls
4 Comments1 Solution327 ViewsLast Modified:
I need to make sure the following config is correct, for a incoming PPTP connection, through a ASA 5510.

here is what I have:

access-list OutIn permit gre <object-group> <object-name> host <public IP address>
access-list OutIn permit tcp <object-group> <object-name> host <public IP address> 1723
static (inside,outside) <public IP address> <internal IP of auth server> netmask 0 0
access-group OutIn in interface outside

Now, I had seen this document from cisco:

What confused me is this line:

static (inside,outside) netmask 0 0

The two '0' at the end. I am not sure what they are. I assume they are needed?
At any point, do I need to specify IP 47? Or should the above take care of it?


Our community of experts have been thoroughly vetted for their expertise and industry experience.

Log in to continue reading
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform for $9.99/mo
View membership options
Unlock 1 Answer and 4 Comments.
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
The Value of Experts Exchange in My Daily IT Life

Experts Exchange (EE) has become my company's go-to resource to get answers. I've used EE to make decisions, solve problems and even save customers. OutagesIO has been a challenging project and... Keep reading >>


Owner of Outages.IO
Phoenix, Arizona, United States
Member Since 2016
Join a full scale community that combines the best parts of other tools into one platform.
Unlock 1 Answer and 4 Comments.
View membership options
“All of life is about relationships, and EE has made a virtual community a real community. It lifts everyone's boat.”
William Peck

Member since 2004