Re: VPN win2003

I am assuming you have configured the Win2003 server
for IPSec VPN.

You need to open up IP protocols ESP and AH, they are
protocol numbers 50 and 51 respectively. Also port UDP
500 for IKE.

access-list inbound permit esp any host x.x.x.x 
access-list inbound permit ah any host x.x.x.x 
access-list inbound permit udp any host x.x.x.x eq
isakmp 

where x.x.x.x is your Win2003 server IP. But this is
assuming you are not NAT-ing the Win2003 server IP
address.

Why do you need to allow 1723 and GRE, btw??

HTH,

Siddhartha


 --- Andrew Gostanian <[email protected]> wrote: >
Hi everybody,
> 
> I have set up a VPN Server ( Win2003), it works fine
> from inside the
> company, but when I try to connect to it from the
> outside, I get a 721
> error.
> 
> It will go as far as checking username and password
> and then I get the 721.
> I have  PIX firewall and I opened port 1723 and GRE
> is ok. I tried opening
> port 500 as well but to no avail.
> 
> What settings should be opened on the firewall? By
> the way I am using XP Pro
> to connect from the outside.
> 
> Thanks for any support,
> 
> Drew
> > _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn 

________________________________________________________________________
Want to chat instantly with your online friends?  Get the FREE Yahoo!
Messenger http://mail.messenger.yahoo.co.uk