Cisco :: PPTP VPN To Pass NAT On Cisco 2921 Router
Apr 14, 2013
I am struggling to have my PPTP traffic to get routed through NAT to reach other Server LAN segment. I am using Cisco 2921 router as a PPTP server.This Cisco 2921 router is working as PPTP server and doing NAT also to reach Server LAN segment (LAN-B).My problem is after PPTP connection establishes I cannot reach any of the LAN segment, but after connecting PPTP I can browse Internet without any issue, but none of the LAN element is reachable. Please have a look on the configuration I am posting 2921 router configuration to suggest something, I have also attached the network setup for better understanding…Just to update Clients in LAN-A can access Internet as well as servers (LAN-B). [code]
View 2 Replies
ADVERTISEMENT
Oct 23, 2011
I have a trouble with PPTP VPN between Windows clients and Cisco 2921 router with RADIUS (IAS) authorization. When I try to connect to Cisco 2921 from Windows 7 using MS-CHAP v2 I receive error 778: it was not possible to verify the identity of server . Then I use PAP - everythig is OK. On Windows XP the same situation.
Cisco config:
version 15.0
service timestamps debug datetime msec
[Code].....
View 6 Replies
View Related
May 6, 2008
i read cisco document:[URL] pptp client is in inside,pptp server is in outside.when i donot use firewall, the pptp connection can establish successfully.but use pix 525 7.0(7) i config:
inspect pptp.
pptp connection cannot setup.
show connection in pix:
pptp tcp 1723 is ok.
gre connection only one "E" flag, E means 'outside back connection'.i try second method:delete 'inspect pptp',permit tcp 1723 and gre traffic from outside to inside, and i have config static nat,but the pptp connection cannot work too.so i think there is a pptp bug exist in pix 7.0(7).
View 5 Replies
View Related
Jan 26, 2012
I have a pptp server on my network and am trying to configure my new RV110W so that I can tunnel through to it from outside.
I believe I must do port forwarding for TCP on port 1723 to get those packets going to my PPTP server. PPTP also uses GRE and I don't see that as an option anyware in port forwarding... Does that just work... as a matter of the VPN pass through checkbox being enabled ?
My netgear router would lock up every few days but it under the firewall configuration it had list of services that included PPTP and I just selected that, entered the IP addresses on the outside that I would accept, and the IP address on the inside that the PPTP clients would connect to, and it worked....
I'm thinking it is harder on this device because this device supports actually logging into it.. I am interested in learning more about that technique especially if it is more secure but the way I see it the firewall device can see all of my network and the pptp server I am using is on a file server and limited to those files shared on that server.
View 3 Replies
View Related
Oct 2, 2012
I am having a problem connecting to my office VPN from home since I changed my (home) router to the RV180W. I am not using pre-configured tunnels, I just connect to the office VPN using the built-in Windows PPTP client when necessary. I have a small network at home using the router in a NAT configuration on my static IP fibre DSL connection.
I had previously been able to connect using PPTP from either XP or Windows 7. Now I get "Error 732: Your computer and the remote computer could not agree on PPP control protocols". Unfortunately I don't know what hardware or PPTP server is used at the office.(I don't know if it is relevant but I have also configured the RV180 PPTP server to allow incoming VPN connections - this works fine. It doesn't make any difference to my issue whether it is enabled or not.)Are there any known problems using Windows PPTP client through the router in a NAT configuration. Is there anything I need to configure apart from enabling PPTP passthrough?
Edit: Just to clarify, the problem is making PPTP VPN connections from XP/Win7 on my home network over the internet to my office VPN/PPTP server, via the RV180W as my home router (using NAT/PAT).
Edit: More info. Looks like the office VPN is a Microsoft RAS server on Windows 2008 behind a cisco PIX firewall.
Edit: Just to be sure, I swapped out the cisco RV180W for my old netgear router and I was immediately able to VPN again with no issue from both XP and Win7. When I swapped the RV180W back in again, I was able to VPN from XP but not Win 7 so it looks as though the PPTP passthrough works occasionally but is intermittent. Just to be clear, the VPN is only intermittent using the RV180, it has always worked flawlessly on the other router so I don't think there is a problem with the internet connection or client/server configuration.
View 18 Replies
View Related
May 15, 2006
Can I configure a PIX (515), as PPTP client to establish a tunnel with non-Cisco PPTP server ? Can my PIX initiate this type of connection ?Today, I use a PC with PPTP client to establish this and I want replace this with a PIX and I don´t want depends of a PC.
View 5 Replies
View Related
Jan 7, 2011
A PC connected to a Cisco 877 router and 877 router is connected to another router (7301) via GRE tunnel,Cisco 7301 router is a NAS server and is being used as a PPPOE server.If user create a PPPOE connection on his computer and dial with a username/pass we want to send the PPPOE traffic to 7301 router, so 877 router should pass the PPPOE traffic to 7301 and user will be able to connect,User -> 877 -> 7301(PPPOE server).
View 4 Replies
View Related
Mar 7, 2012
we have a Cisco 3825 router which does not work well with a DSL modem(ISP provided). I have configured the Gi0/0 port of the router to plug into this DSL modem but it does not ping to the ISP gateway. If we do a shut/no shut on the interface then it work fine for about 30 secs. Sometimes even for 1 hr. Then the packets drop and we cannot pass any traffic through this interface.
Now, if the ISP connection is terminated on a computer it works fine. It works fine without dropping any packet.I have tried various options like using a straight/cross cable. I have tried to configure the interface negotiation for 100/full, 100/half, auto/auto and almost all the options.I have also tried to interconnect the devices using a L2 device like a HUB. Nothing works.
View 5 Replies
View Related
Jan 11, 2013
I recently upgraded from a Cisco 3900 series router to a Cisco ASR1k router. Since the upgrade, I have internal clients who claim they cannot connect to external VPNs. These internal clients are behind a NAT that routes a public IP address to a group of clients with private IP addresses.
How can I ensure that all VPN traffic is able to pass through the NAT?
View 2 Replies
View Related
Apr 9, 2013
I have a 5915 router. Trying to configure multicast to pass. I have implemented different version of the configuration, but the attached is the latest and suggest by CCIE support. I have a Java program on one side of the router that pulls the multicast traffic fromt he other side of the router. The data is not getting to the java program with this configuration. I have been working on this for a week and unable to see anything. Wireshark doesn't see the traffic. In the attached config, I have also included some stats.
hostname HPIB-Rtr!boot-start-markerboot system flash:C5915-ADVENTERPRISEK9-MZ.SPA.152-1.GC.BINboot-end-marker!!!no aaa new-modelcrypto pki token default removal timeout 0!!!!!
!ip multicast-routing ip cefno ipv6 cef!multilink bundle-name authenticated
interface Loopback0ip address 10.10.1.3 255.255.255.255ip pim sparse-mode!interface Loopback100ip address 192.168.3.1 255.255.255.0ip pim sparse-modeip igmp static-group 239.255.10.10!interface FastEthernet0/0ip address 172.30.255.1 255.240.0.0ip pim sparse-modeip nat outsideip virtual-
[Code].....
View 10 Replies
View Related
Jul 14, 2011
I cannot telent to 1941 router from a Window 7 PC and I can a Window XP PC. Telnet is enabled on Win 7 PC. I upgraded 1941 to latest IOS.Compters running Windows XP can telnet to router and hit the internet. Computers running Windows 7 cannot hit the internet. I replaced the 1941 with a 1760 router and Win 7 computers can telnet to router and hit the internet. I used the same config from the 1941 on the 1760.
View 5 Replies
View Related
Aug 25, 2012
I'm trying to configure 1700 K9 router to act as PPTP client and connect to Microsoft VPN server (in order to enable all clients on LAN to seamlessly access host on remote location). [URL]
I'm using GMS3 to test everything in lab environment. I managed to connect to Microsoft VPN server but the connection drops immediately. Below is debug info from router R1 (router R2 just simulates host on LAN) and configurations for both routers. The only clue I got from debug is that immediately before closing connection there's a message "CCP: Failed to negotiate with peer"...
R1#sh debug
PPP:
PPP detailed event debugging is on
MPPE Packet Details debugging is on
[Code].....
View 2 Replies
View Related
Oct 21, 2007
I need to establish PPTP VPN to 877 modem/router from Internet.The VPN client is a Windows XP standard VPN client.I configured the router basing on the document: "Configuring the Cisco Router and VPN Clients Using PPTP and MPPE". url...And... It works quite nice BUT only when I use PAP protocol to authenticate the user.When I try to use 'MS-CHAP' or 'MS-CHAP v2' I get error 691 on the client side("Access was denied because the username an/or password was invalid on the doman.") [code]
View 5 Replies
View Related
Dec 30, 2012
Looking to upgrade my old G router to the EA6500. I don't see anything about VPN pass through on the EA6500 or any linksys N router. Is this feature something they no longer include?
View 3 Replies
View Related
Nov 6, 2012
due to upcoming changes to our network I'd like to be able to pass vlans across the FE ports of a Cisco 1841 router.1 port would go to a managed switch and then to local devices on different VLANs.the 2nd port would go upstream to a Cisco 3825 at a different location which would then connect to the internet.due to monitoring behind the Cisco3825 we would like all NAT to occur on the 3825.
what I would like to happen is this example device connected to port 7 on managed switch gets an IP (10.0.7.10) from the Cisco 1841 in VLAN 7 (10.0.7.0/24).traffic from that device goes to the switch, then in f0/1 on the 1841 and out f0/0 still with the same IP info, no NAT occuring.traffic is received on the 3825 port 0/1 and then NAT occurs and out port 0/0 to the internet.
View 4 Replies
View Related
Oct 13, 2011
I need a router to connect to our ISP by BGP and in a future to a second ISP. Our ISP is going to provide us about 300.000 route entries by BGP. So router 2921 would be enough??? or should i go to a higher model?We are going to have 100Mbps with this ISP and probably in 3 months we'll have to double it. Also we'll need IPv6 support.I saw router performance [URL]f and it's has 480.000 PPS and 245 Mbps but for 64 bytes lenght packages. If the packets are bigger the throughput should be best I suppose... 1500 bytes about 5,5 Gbps. In the case you consider the model is sufficient, the flash or RAM should be increased?
View 4 Replies
View Related
Jan 9, 2012
I have a remote location that has a Linksys/Cisco RV042 router [URL] that allows PPTP connections based on username and password combinations. There are no intermediary routers between this device and the internet - only a DSL modem. A secondary WAN connection is not present.
I am able to dial into this VPN using the Windows XP and Windows 7 dialers from any of my local free-wifi locations(e.g. Starbucks). I WAS able to connect to this VPN connection from my house when my home router was a Buffalo brand router.
I have replaced the Buffalo router with a 2620(non-XM) that is connected in ROaS fashion to a 2950 switch. I need some guidance on what in my config is not allowing me to connect to this remote site.
Home network info: Local subnets : 192.168.x.x
Remote network info: Local subnet : 10.214.x.x
The Windows XP dialer client indicates that the username and password challenge is where the connection fails. It ultimately gives me the error code 619. I have performed a Wireshark packet capture of an attempt to connect from ip 192.168.10.11. This packet capture shows multiple "Configuration Request" packets being exchanged between the two endpoints, but does not ever show an exchange of authentication.
My nat translation table shows an entry for both a GRE tunnel as well as port 1723 between 192.168.10.11 and the WAN port of the RV042 when attempting to establish this VPN.
I have attached my 2620 configuration for your review.
View 1 Replies
View Related
May 24, 2012
I'm having some trouble with my P660RU-T1 configuration. I have recently set up a linux SFTP server at my home and am trying to access it via my public ip (eg 1.1.1.1), the problem is this public IP goes to the router which doesnt pass on the requests to the server.Last summer when i first messed around with this i had no problems with using the public ip to access the server, its only recently.
View 1 Replies
View Related
Oct 31, 2011
I bought a XBOX for my grandson and want to connect it to the internet for him. It wont connect without a WPA2 pass phrase. I tried entering 192.168.1.1 to access the router but it wont go though. I contacted Linksys and of course they said my router needed to be reconfigured at a cost.
View 4 Replies
View Related
Aug 20, 2011
I have e3000 but in VPN Pass through I don't have ( pppoe pass through )
Just I have is ipsec + pptp + l2tp only
How could i add ppoe pass through in my e3000
View 1 Replies
View Related
Feb 20, 2013
Is there a recommended number of GRE tunnels that Cisco 2921 ISR router with default configuration (512MB DDR2 ECC DRAM) can support?
View 5 Replies
View Related
Mar 19, 2013
Region : UnitedStates
Model : TL-MR3020
Hardware Version : V1
Firmware Version : latest
ISP :
I have problem to get pptp working. I setup pptp VPN server on my home router and configured pptp dialup on my laptop. If my laptop connect to internet directly, I am able to connect to home router via PPTP VPN. However, if I connect TL-MR3020 to internet(wired) and then connect my laptop to TL-MR3020 wirelessly, I can browse internet without problem. The problem is I cannot connect to home router via PPTP VPN any more. I believe the problem is on TL-MR3020.
View 4 Replies
View Related
Jun 7, 2012
how i can configure the Cisco RV042 to access PPTP VPN Server (Witopia VPn) or other vpn servers.
View 1 Replies
View Related
Apr 14, 2011
I have a 2821 ciso router and i want to setup a vpn for my windows domain users , they must to reach the domain from outside. There is posibile to intregrate Active directory auth with pptp running on 2821 router? kind of dialin via radius server(IAS running on windows server 2003).
View 3 Replies
View Related
Aug 15, 2012
We have almost identical networks in two offices, with the only difference being, one uses an RV042 and the other an RV082.The setup is: two WAG54GS ADSL modems carry PPOA ADSL connections with static IPs to the two WAN ports of the RV0XX.The WAG54GS routers are configured to DMZ all incoming traffic to the relevant WAN IP of the RV0XXs. VPN pass-through is also set on them. The RV0XX port forwarding is set to forward a selection of traffic such as, PPTP, HTTP, HTTPS, RDP, POP3, SMTP and Remote Desk to the external adapter of an SBS 2003 server which processes all operations including ISA and Exchange.Mail for Exchange arrive through both ADSL connections for redundancy. VPN connection requests from remote users to the SBS come in through both ADSL connections.The office fitted with RV042 works fine and does all the following without problems.The office fitted with RV082 has issues. Remote VPN requests comming from ADSL to WAN port 1 of the RV082 connect successfully to the SBS2003 server, but the VPN requests coming from ADSL to WAN port 2 fail to connect! Similarly, incoming mail destined for Exchange don't get through if coming from ADSL of WAN port 2.I have updated the firmware on both RV042 and RV082, but the RV082 still has the above issues.
View 1 Replies
View Related
Jul 13, 2011
I cannot connect via VPN PPTP (normal setup in windows xp), I have managed to connect over VPN direct connected to internet, through the router (WRVS4400n) if I turn off the firewall. But I cannot connect with the firewall enabled,One more thing, the device is on and I have enabled the passthrough (and 'Multicast Passthrough' in firewall basic settings) for all available options where one of the options is PPTP.
View 1 Replies
View Related
Jul 11, 2012
I am installing a security license on Cisco 2911 Router for the first time. It already has a temporary license installed on it which is expiring soon. Cisco has already mailed me the procedure for installation. I want to know if i need to uninstall the previous license before installing the new one.
View 2 Replies
View Related
Apr 15, 2013
We recently acquire a cisco 2921/K9 router to interface 2 networks
Network 1 : 169.254.XXX.XXX/16 on GigabitEthernet0/0 interface
Network 2 : 192.168.1.XXX/24 on GigabitEthernet0/1 interface
On the network 1 side there is a multicast source (169.254.200.200 destination : 225.0.0.1) on the network 2 side there is 1 receiver which is not multicast capable(old) but i want it to receive the multicast stream for the moment we configure the ip multicast-routing and each interface each interface with ip pim sparse-dense-mode then configure the GigabitEthernet0/1 in order to join the multicast group (using ip igmp static-group 225.0.0.1) and wireshark confirm that the multicast stream on the network 2 side from 169.254.200.200 -> 225.0.0.1 of course the receiver don't the stream, but if i force a "multicast to unicast" process inside the router it shall be ok.. after many hour of internet browsing i found 2 solution :
- NAT, [URL]
- multicast service reflection (Cisco documentation)
The NAT example don't work ,what is the best way to do this task.
View 8 Replies
View Related
May 19, 2013
I need to configure cisco router 2921 for snmp v3,
View 5 Replies
View Related
Jun 27, 2011
I just purchased thie Cisco 2921 router and have all the configuration completed except the Firewall and NAT. We have 4 supnets at our location on the router each with a DHCP handed from the router to our network. Any examples for the Firewall and Nat configurations?
View 6 Replies
View Related
Oct 2, 2012
We have a 2300 RPS with single 1150WAC power supply (C3K-PWR-1150WAC) which is connected to one 2921 Router. But it is not backing the rotuer.
Router 2921 running IOS
c2900-universalk9-mz.SPA.152-2.T1.bin
I am getting the following logs:
*** External Redundant Power Supply is present, but type is unknown or not supported.***
%ENVMON-1-POWER_WARNING: : RPS Online Insertion and Removal is not supported.
Do we required any configuration to be done on Router end.
Note: The RPS is backing 2960 Switch.
View 2 Replies
View Related
Feb 25, 2013
I contact you due that I’m currently configuring a Router Cisco 2921 with an Etherswitch module. The specific inventory of Router Cisco 2921 is:
Router#show inventory,NAME: "CISCO2921/K9 chassis", DESCR: "CISCO2921/K9 chassis"
PID: CISCO2921/K9 , VID: V06 , SN: XXXXXXXXXXX
NAME: "High Speed WAN Interface Card - 1 Port Gigabit Ethernet on Slot 0 SubSlot 0", DESCR: "High Speed WAN Interface Card - 1 Port Gigabit Ethernet"
PID: HWIC-1GE-SFP , VID: V01 , SN: XXXXXXXXXXX"
[Code]....
View 1 Replies
View Related
Oct 5, 2012
I've got a problem with my new Linksys E1200 (v1) router. It cuts the bandwidth of my PPTP connection with ISP (which is 50 Mbps) down to about 12 Mpbs. My firmware is the latest one (v1.0.03 build 4). I've done some reading and found out that it's pretty common problem between Linksys E-Series routers and ISPs that use PPTP/L2TP.
View 4 Replies
View Related
