Solved

Pix 6.3 to 7.0 migration - command not working

Posted on 2007-03-27
4
445 Views
Last Modified: 2010-08-05
I was able to just copy and paste the 6.3 config into 7.0 and it worked fine for the most part. The commands that are giving me error are the following (pasting output below)

Is there anyway to get around it? If this can't be done, what would I miss from the old config from the users standpoint? Thanks for your time.

hostname(config)# vpdn group PPTP-VPDN-GROUP accept dialin pptp
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP ppp authentication pap
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP ppp authentication chap
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP ppp authentication mschap
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP ppp encryption mppe 128
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP client configuration address local RASVPN
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP client configuration dns 10.1.44.12
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP pptp echo 60
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn group PPTP-VPDN-GROUP client authentication local
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn enable outside
ERROR: % This command is an unreleased and unsupported feature

hostname(config)# vpdn enable inside
ERROR: % This command is an unreleased and unsupported feature
0
Comment
Question by:jibranilyas
  • 2
  • 2
4 Comments
 
LVL 19

Expert Comment

by:nodisco
ID: 18803925
Hey there

Unfortunately the bad news is that 7.X does not support pptp termination.  Your options would be to setup an internal pptp server and allow traffic through the PIX to it, or use Cisco VPN client.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708d8.shtml

Under the prerequisites ^

sorry to bear the bad news

hth
0
 

Author Comment

by:jibranilyas
ID: 18804364
Thanks. So as far as the users are concerned, what will they miss after this transition?
0
 
LVL 19

Accepted Solution

by:
nodisco earned 500 total points
ID: 18804395
All the commands listed above are all to do with pptp termination.  So the PIX will perform its functions per before with the one exception that Microsoft PPTP clients that used to connect to the PIX outside ip address will no longer be able to do this.  
The Cisco VPN client is a far more secure connection method and is the recommended vpn client to use

hth
0
 

Author Comment

by:jibranilyas
ID: 18804627
Great!
Thank you so much
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
adding a printer to QAD 10 62
WLC 5508 controller configuration 4 76
md5 password 3 61
How to setup 3 isps on a redundant mode? 3 28
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question