Microsoft VPN

[JakeHere]

Hi Guys,

I know this one has probabaly been answered time and time again. I am struggling with good old microsoft vpn connections being initiated from behind my NG w/AI (R55) to external customers sites. I have done the usual enabling pptp and gre ports and protocols and tried creating a host that was statically nat'ed as apposed to a hide. Still no luck. I can see incoming prot 47 being blocked on my deny all rule even though it is allowed by previous rules.

Any suggestions would be great...

Thanks

Jake.

[chillyjim]

Check to make sure your not blocking it in SmartDefense.

[Sergej]

There was some nat traversal improvements in the HFA. But if I remember correctly this was in the earlier versions (pre R55). R55 must support it initially.

During IPSEC session initialization we can see some dropped GRE packets. But actually all the GRE traffic must be encrypted inside IPSEC. Am I wrong?