Link to home
Start Free TrialLog in
Avatar of RAMU CH
RAMU CHFlag for India

asked on

PPTP port issue while VPN connecton

Hi,

We are having issue while connecting to client VPN using dialup PPTP through our ASA Firewall
Pls find the screenshot of the Error Message

Regards
Ramu
pnc-vpn.PNG
Avatar of Ernie Beek
Ernie Beek
Flag of Netherlands image

So you opened up the correct ports?
Did you try to disabled the statefull firewall in the VPN client?
Is anything showing in the logs of the ASA?
Avatar of RAMU CH

ASKER

I have opened all port for the Local IP .
 WIl send you the Firewall Logs
Regards
Ramu
Please do, I'll have a look then.
It's most likely going to be the client side firewall. Have you disabled the local software firewall on the client PC getting this error? Let us know.
Avatar of RAMU CH

ASKER

Hi,

I have made a Static NAT to a LAN PC and allowed traffic from Client VPN server IP to Public Natted IP of the PC then able to connect to the VPN from the LAN but when i made dynamic NAT to the Respective Network and allowed traffic from VPN server IP to the DYnamic NAT Ip it wont connected
Is there any issue with PPTP traffic

Regards
ramu
Avatar of RAMU CH

ASKER

Hi,

Pls reply

Regards
Ramu
Ah, so you are trying to connect from the outside to the inside? If that is the case you will need a one to one static. The GRE protocol needs that, it cannot be tunneled through a port in tcp (it's a whole different protocol).
Avatar of RAMU CH

ASKER

What is GRE Protocol , what is the Purpose of that..Do we need to allow Gre port exclusively for inbund connections . is GRE is a  TCP or UDP traffic.

Will you briefly explain about that

Regards
Ramu
GRE is a protocol just like TCP and UDP so it's NOT a port on Tcp/udp.
http://en.wikipedia.org/wiki/Generic_Routing_Encapsulation
Avatar of RAMU CH

ASKER

What are the other Protocols like TCP/UDP/GRE/ICMP

Regards
ramu
ASKER CERTIFIED SOLUTION
Avatar of Ernie Beek
Ernie Beek
Flag of Netherlands image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of RAMU CH

ASKER

Thanks