CCNP - VPN using PPTP

Author

VPN using PPTP

adilux

2001-08-02, 4:02 am

anyone know the process and commands to setup VPN using PPTP, i have a 1720 router.??

MadChef

2001-08-02, 4:28 am

You might try offering a litte more information.

MC

adilux

2001-08-02, 4:39 am

umm...
how can i setup my cisco 1720 router to act as a vpn server?, are there anything i have to config?...i think its getting late...i must sleep.

MadChef

2001-08-02, 5:00 am

Ah. I had no idea you could do that in IOS, I thought it was only on the Pix. This helps explain why you need the new code since it apprears that this functionality just made it's way down to the 1700.
This is an explanation of how to do it in 12.2:
http://www.cisco.com/univercd/cc/td...prt8/dafvpn.htm

I'd be curious to know how it goes.

MadChef

depamo

2001-08-02, 9:45 am

Cisco is selling tons of these routers. All sorts of capabilities in these little suckers. True SOHO solution that can do almost everything that the big boy routers can do. Of course not the processing power for switched packets per second but you can actually get a WIC card that will do all the VPN calculations so you can leave the processor for doing only switching. Great little device.

Here is some other info on setting up VPN on Cisco with windows. Neudered for platform but should work with your IOS.

http://www.cisco.com/univercd/cc/td...m#xtocid2817920

Very step by step with links to sites on how to interface Win2K to Cisco. Actually would be easier to configure with Cisco VPN Client. Is there a reason that you want to use the Windows VPN client instead??

MadChef

2001-08-02, 1:45 pm

quote:
Originally posted by depamo
Actually would be easier to configure with Cisco VPN Client. Is there a reason that you want to use the Windows VPN client instead??

I was actually wondering the exact same thing. IPSec sure is a nicer protocol. I'm a general PPTP hater, but I didn't want to start that war.
So I second his question, because I'm always curious why people like to set up PPTP with Cisco devices. Makes a little more sense if you're terminating them on an NT server, just not so much with Cisco.

MadChef

adilux

2001-08-02, 3:32 pm

reason for using PPTP is because i've used it with my Netopia router, to allow linux and macintosh machines to connect, but sometimes there are problems. I asked the cisco Tech support, and they said that IPsec doesn't support Macintosh and Linux boxes yet, but they're working on it, so until then, i'll be using PPTP. I wish i could use Ipsec.

and the reason for needing to upgrade to a newer IOS is to support the hardware (WIC), this is what the tech support at cisco told me.

(is it me or is www.cisco.com difficult to navigate around in?)

I'm in the process of purchasing a contract thingy from the reseller i got the router from.

I'll let you guys know what happens.
thanks for the VPN Info.

adilux

2001-08-27, 5:59 pm

okay, i had pptp setup on my cisco 1720 router, but it really slows down the connections with encryption (mppe40) enabled. So I've decided to switch to ipsec with 40bit encryption, it seems to work fine, but i have to use the Cisco Secure Client that they have, but the problem, only for Windows9x users, anyone know if i can use any other ipsec vpn client software?

Another problem i'm facing with, i'm trying to test this ipsec vpn at home. I have a Linksys router, i have the most current Firmware, i enabled ipsec passthrough, but no luck, anyone have any suggestions?

adilux

2001-08-27, 6:47 pm

oh yea, i'm forgetting this is an exam question forum, sorry,

but one more thing, madchef wanted to know how this pptp thing went,
well, on the router, i had to configure a virutal interface 0 and apply NAT on it so that the incoming vpn clients will be able to get to the outside using a vpn pool that i setup, i think it goes like this:
ip local pool vpn 192.168.1.101 192.168.1.254

and somewhere in the configuration you tell the interface to use the vpn pool,

then you setup a username and password, encrypted/unencrypted
(i used the ms-chap version)
supply a domain for the router, (don'tk now if this was necessary or not)

but, that's basically it.

MadChef

2001-08-28, 5:11 am

quote:
Originally posted by adilux
but i have to use the Cisco Secure Client that they have, but the problem, only for Windows9x users, anyone know if i can use any other ipsec vpn client software?

The new unified client will allow all Win32 clients to use IPSec, but it doesn't currently support other Operating Systems. If you poke around, you'll find it's possible to use free s/wan to connect a linux box using IPSec.
This is the Win32 client you want:
http://www.cisco.com/kobayashi/sw-center/vpn/client/

MadChef

adilux

2001-08-29, 5:33 am

hey madchef, is this the same software as the SafeNet/Soft-PK?
i cannot use the 3des version,
i have the 56bit version,
would you happen to know how to configure it to go through a linksys router?

MadChef

2001-08-30, 4:57 am

quote:
Originally posted by adilux
hey madchef, is this the same software as the SafeNet/Soft-PK?

No, it's not the same and it only comes in 3DES.

MadChef

Wintal

2001-08-31, 2:10 pm

Check the version of your firmware on your Linky.

Features have been broken and fixed with every version, you may have to go back to get a stable version for your situation.

The Linksys Forum at www.dslreports.com has beta firmware with all the info you need.

Sponsored Links