Windows 2008 server routing and remote access through Cisco ASA trouble

Posted on 2011-05-11
Medium Priority
Last Modified: 2012-05-11
Dear EE's

 I am having trouble with PPTP VPN sessions from client through a Cisco ASA 5505 and to a Windows 2008 server running RRAS.

I get the connection, the Cisco knows it and the RRAS lists it. Username is verified.

On the client however, I only see traffic being sent, not returned, and I cannot connect to network resources

Internal net - gateway:
RRAS server - LAN
RRAS server: - internal
DHCP window for VPN clients

I could imagine the Cisco being the issue. Have uploaded the running config to this post.

Please let me know, if you need any other information

Question by:juuz
  • 2
  • 2

Expert Comment

ID: 35741661
I'm open to correction on this one but...

You have only defined a port address translation for pptp.  In order for pptp to work and also for the gre traffic to pass through to the Windows Server you need to define a static nat for the IP address of the windows server...

In order to create a static nat you will need a dedicated public IP address for the Windows Server which you can use to create the nat on the firewall.

Author Comment

ID: 35741757

 Excellent - I do however only have one public IP that is being used for "everything". Can it work with a single public IP that is being used for mail flow, owa etc.?

Thank you for the fast reply


Accepted Solution

Saineolai earned 2000 total points
ID: 35741895
I don't believe there is an alternative, you really need a dedicated address for the Windows Server...



Author Comment

ID: 35742169
Thanks very much. I have ordered a second public IP...


Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When speed and performance are vital to revenue, companies must have complete confidence in their cloud environment.
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question