RAMU CH
asked on
PPTP port issue while VPN connecton
Hi,
We are having issue while connecting to client VPN using dialup PPTP through our ASA Firewall
Pls find the screenshot of the Error Message
Regards
Ramu
pnc-vpn.PNG
We are having issue while connecting to client VPN using dialup PPTP through our ASA Firewall
Pls find the screenshot of the Error Message
Regards
Ramu
pnc-vpn.PNG
ASKER
I have opened all port for the Local IP .
WIl send you the Firewall Logs
Regards
Ramu
WIl send you the Firewall Logs
Regards
Ramu
Please do, I'll have a look then.
It's most likely going to be the client side firewall. Have you disabled the local software firewall on the client PC getting this error? Let us know.
ASKER
Hi,
I have made a Static NAT to a LAN PC and allowed traffic from Client VPN server IP to Public Natted IP of the PC then able to connect to the VPN from the LAN but when i made dynamic NAT to the Respective Network and allowed traffic from VPN server IP to the DYnamic NAT Ip it wont connected
Is there any issue with PPTP traffic
Regards
ramu
I have made a Static NAT to a LAN PC and allowed traffic from Client VPN server IP to Public Natted IP of the PC then able to connect to the VPN from the LAN but when i made dynamic NAT to the Respective Network and allowed traffic from VPN server IP to the DYnamic NAT Ip it wont connected
Is there any issue with PPTP traffic
Regards
ramu
ASKER
Hi,
Pls reply
Regards
Ramu
Pls reply
Regards
Ramu
Ah, so you are trying to connect from the outside to the inside? If that is the case you will need a one to one static. The GRE protocol needs that, it cannot be tunneled through a port in tcp (it's a whole different protocol).
ASKER
What is GRE Protocol , what is the Purpose of that..Do we need to allow Gre port exclusively for inbund connections . is GRE is a TCP or UDP traffic.
Will you briefly explain about that
Regards
Ramu
Will you briefly explain about that
Regards
Ramu
GRE is a protocol just like TCP and UDP so it's NOT a port on Tcp/udp.
http://en.wikipedia.org/wiki/Generic_Routing_Encapsulation
http://en.wikipedia.org/wiki/Generic_Routing_Encapsulation
ASKER
What are the other Protocols like TCP/UDP/GRE/ICMP
Regards
ramu
Regards
ramu
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks
Did you try to disabled the statefull firewall in the VPN client?
Is anything showing in the logs of the ASA?