
8-21
Cisco PIX Firewall and VPN Configuration Guide
78-15033-01
Chapter 8 Managing VPN Remote Access
Using PPTP for Remote Access
The clear vpdn group command removes all the vpdn group commands from the configuration. The
clear vpdn username command removes all the vpdn username commands from the configuration. The
clear vpdn command removes all vpdn commands from the configuration.
You can troubleshoot PPTP traffic with the debug ppp and debug vpdn commands.
PPTP Configuration Example
Example 8-3 shows a simple configuration, which lets a Windows PPTP client dial in without any
authentication (not recommended). Refer to the vpdn command page in the Cisco PIX Firewall
Command Reference for more examples and descriptions of the vpdn commands and the command
syntax.
Example 8-3 PPTP Configuration Example
ip local pool my-addr-pool 10.1.1.1-10.1.1.254
vpdn group 1 accept dialin pptp
vpdn group 1 client configuration address local my-addr-pool
vpdn enable outside
static (inside, outside) 209.165.201.2 192.168.0.2 netmask 255.255.255.255
access-list acl_out permit tcp any host 209.165.201.2 eq telnet
access-group acl_out in interface outside
The ip local pool command specifies the IP addresses assigned to each VPN client as they log in to the
network. The Windows client can Telnet to host 192.168.0.2 through the global IP address 209.165.201.2
in the static command statement. The access-list command statement permits Telnet access to the host.
Komentáře k této Příručce