This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Require 1-user PPTP connection and access both ends of an ipsec vpn tunnel network

I have seen lots of variations of this request - but still looking for the simplest solution for my situation.

UTM/LAN A 10.5.1.10/24 === IPSEC VPN ==== ASA/LAN B 10.100.5.0/24

LAN A has a PC with IP 10.5.1.12
- I can Telnet to 10.5.1.10 [ LAN A ]
- I can Telnet to 10.100.5.10 [ LAN B ]

I want to do what the PC on 10.5.1.12 can do, but from a PPTP Connection.
- I would be connecting to LAN A

1. If I use a VPN Pool ( 10.3.252.0/24 ) giving me an IP of 10.3.252.2
- I can Telnet to 10.5.1.10
- BUT I cannot ping / Telnet to 10.100.5.10

2. I only want ONE PPTP remote user to be able to access this Tunnel via PPTP.

3. I would assume making this remote user have a Static IP would fix it
- but it will only have access to one or the other; not Both Lan A and B
- depending on the Static IP I give the PPTP user

4. Would a SNAT fix it ?

Thanks
Dave

This thread was automatically locked due to age.

Parents

0 GMF over 11 years ago

Create an additional tunnel:
PPTP A 10.3.252.0/24 === IPSEC VPN ==== ASA/LAN B 10.100.5.0/24
Do NOT use automatic firewall rules!

Configure a fixed IP for this PPTP-User (e.g. 10.3.252.60). Create a firewallrule for 10.3.252.60 to allow port 23 (telnet) to 10.100.5.10.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 GMF over 11 years ago

Create an additional tunnel:
PPTP A 10.3.252.0/24 === IPSEC VPN ==== ASA/LAN B 10.100.5.0/24
Do NOT use automatic firewall rules!

Configure a fixed IP for this PPTP-User (e.g. 10.3.252.60). Create a firewallrule for 10.3.252.60 to allow port 23 (telnet) to 10.100.5.10.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 DaveG over 11 years ago in reply to GMF

Create an additional tunnel:
PPTP A 10.3.252.0/24 === IPSEC VPN ==== ASA/LAN B 10.100.5.0/24
Do NOT use automatic firewall rules!

Configure a fixed IP for this PPTP-User (e.g. 10.3.252.60). Create a firewallrule for 10.3.252.60 to allow port 23 (telnet) to 10.100.5.10.

Thanks GMF, I will try what you have described.

Is there a "special" function when you define a network like VPN Pool (PPTP) and place it under Remote Access, PPTP, Pool Network?

Here are my questions:
1. Why not give the PPTP user a Static IP that is already in one of the "allowed" networks on the tunnel I want him to access ?
- this does not work ; just do not understand why

2. What happens if my VPN Pool (PPTP ) network is used by other users ;
do they have any access to the tunnel ( assume not since no special rule )?

Thanks again.
will report back when I get the desired results or more questions.

Dave
Cancel
Vote Up 0 Vote Down

Cancel

Require 1-user PPTP connection and access both ends of an ipsec vpn tunnel network

Submitted a Tech Support Case lately from the Support Portal?