RE: [FW1] PPTP

[Don Guyer]

Title: RE: [FW1] PPTP

Andrew,

 

    That did it! All I changed was the ip_p=47 to accept [ 9:1] =47 . I can't thank you enough for your assistance.

 

    And thanks to all who replied to my message.

 

Regards,

Donald W. Guyer
Network Engineer
Citadel Federal Credit Union
[EMAIL PROTECTED]
www.citadelfcu.org
Voice:  610.380.7072
Fax: 610.380.6083

-----Original Message-----
From: Andrew Linker [mailto:[EMAIL PROTECTED]]
Sent: Monday, May 22, 2000 11:58 AM
To: 'Don Guyer'
Subject: RE: [FW1] PPTP

I have had the exact same problem that you are explaining, and I have found that this link explains the solution.

 

http://www.extendedsystems.com/support/faq/vpn/firewalls.html

 

Look under the Checkpoint-1 section and follow those instructions. You will see that you will need to change the ip_p=47 to accept [ 9:1] =47

 

I have done this and now the pptp traffic gets passed thru successfully now.

 

Good Luck!!

 

 
Andrew Linker                                                
Systems Administrator
Telogy Networks, Inc.
     - A Texas Instruments Company
20250 Century Blvd.
Germantown, Md. 20874
(301) 515-6571 voice
(301) 515-7954 fax                                           
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
www.telogy.com <http://www.telogy.com>

-----Original Message-----
From: Don Guyer [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 19, 2000 7:43 AM
To: 'Steven Nurse'
Cc: CheckPoint List (E-mail)
Subject: RE: [FW1] PPTP

Steven,

        I am currently trying to pass PPTP through our firewall (v4.1 SP1 build 41603 - latest patch). It times out when verifying username/password. It works with the firewall wide open. I have the GRE and GRE-Setup grouped together as a PPTP service group, with rules in/out to our PPTP server. The PPTP server is on our local LAN, and we are NATing to a valid Internet address. Any assistance you could provide me with would be greatly appreciated.

Regards,

Donald W. Guyer
Network Engineer
Citadel Federal Credit Union
[EMAIL PROTECTED]
www.citadelfcu.org
Voice:  610.380.7072
Fax: 610.380.6083

-----Original Message-----
From: Steven Nurse [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 18, 2000 7:06 PM
To: Brendan McCauley; '[EMAIL PROTECTED]'
Subject: RE: [FW1] PPTP

Brendan,

        I have pptp working through Firewall-1 V4.0 on a NT box as well
as V4.1.  It took a little time but it works 100%.  Let me know if you
need a hand.

        I only allow PPTP protocol going into one of my servers nothing
else.  This hopefully limits the possibility of hacks.

Steve

-----Original Message-----
From: Brendan McCauley [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 18 May 2000 12:17 AM
To: '[EMAIL PROTECTED]'
Subject: [FW1] PPTP

Please excuse me if there has been a recent thread about this issue, I
haven't been on the list for about three weeks now.

I've found documents on both checkpoint and phoneboy's sites about
configuring PPTP.  The doc on checkpoints site says PPTP won't work
period
through the firewall with versions 3.x-4.0.  Phoneboys site has a little
different configuration but also says nothing about what versions it
will
work with.
Anyone got PPTP working with these version?
Anyone got a better solution than sticking the PPTP interface out on the
external segment?

========================================================================
========
     To unsubscribe from this mailing list, please see the instructions
at
               http://www.checkpoint.com/services/mailing.html
========================================================================
========

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================