Question

Cisco pix501 VPN at home.

VPN, Cisco PIX, Firewalls, PIX, Cisco, IPsec

A question submitted on SearchNetworking.com



I just got IPSEC passthru working. IPSEC passthru is the most important feature because from home I have to VPN back to ASA at work.

I would also like when I'm at work to VPN back to my home (VPN the other way that terminates on my pix 501) This should not affect the IPSEC passthru that is already working but everytime I try to create a remote access profile, passthru stops working and remote access says the payload is malformed (e.g. nothing works)

1. Are the two config compatible?
2. Any tutorial/roadmap available to accomplish this?

On your router you would need to:

Open TCP port 1723 for PPTP or UDP port 500 for IPsec.
Also open IP port 47 for PPTP and 50 for IPsec.
For windows VPN/RAS servers you will also need to enable GRE to be passed through.

You will need to then direct inbound packets on these ports (and protocols) to your VPN Server/appliance's IP address. If you do not have one Microsoft includes components that will let you setup one with windows NT/2000/2003.