Question : Problem: VPN PPTP doesn't connect after straight NAT and ports/protocols open

Customer site at which I provide tech support has VPN which requires Windows PPTP VPN as opposed to Cisco client. I have in the past successfully connected before after mapping a straight (inside,outside) IP-IP NAT rule in my company's CISCO PIX. Customer tried my login from outside network and it connected. I have tried a windows 2000 machine, XP Std, XP Pro, and no client configuration works. I have also tried it from my cellphone as a modem so as to bypass my CISCO and I can't connect, although I've never tried that method before.  I've opened up all the ports and protocols as referenced in the literature: 1723 TCP and IP protocol 47 (GRE - Generic Routing Encapsulation), as well as the other set of 500/4500 UDP just in case. Also I've used the PPTP Ping program from Microsoft and it indicated successful connection (it doesn't log in, it just tests ports and protocol).
Any idea ? I'm puzzled why the customer indicates successful connections with their own mostly non-technical staff which surely have their own home DSL routers and firewalls to deal with.

thanks in advance

Answer : Problem: VPN PPTP doesn't connect after straight NAT and ports/protocols open

The subnet issue is critical. The problem occurs when the client has access to the same/overlapping subnets locally and remotely. Where does the router send the packet?

You mentioned PIX. I am not a "Cisco guy", so I cannot assist but apparently there is a way to use identical subnets with a Cisco. This has been discussed in the past on several occasions. A couple of examples (however these are site to site VPN's):
http://www.experts-exchange.com/Security/Software_Firewalls/Q_21751035.html?sfQueryTermInfo=1+same+subnet
http://www.experts-exchange.com/Hardware/Networking_Hardware/Firewalls/Q_22835071.html?sfQueryTermInfo=1+same+subnet+vpn
http://www.experts-exchange.com/Hardware/Networking_Hardware/Firewalls/Q_22675234.html?sfQueryTermInfo=1+same+subnet+vpn

What are you using as the PPTP VPN server? Windows or the PIX?

Random Solutions  
 
programming4us programming4us