Access W2K Pro via PIX 515 VPN

[Tim]

We need to setup a VPN through our PIX 515 so that a vendor can access their
W2K Pro workstation in our domain and download data to a folder. We think
the PIX is setup right and we're missing something else. To connect to the
PIX VPN, we're using Win XP Pro's Network Connection Wizard to setup the
PPTP VPN connection. If I put the domain name in the login screen, we can't
connect, whereas if I leave it out, we can connect but aren't able to access
the domain. If I do an Ipconfig, I get:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.2.227
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 192.168.2.227
DNS Servers . . . . . . . . . . . : 192.168.2.23
192.168.2.25
Primary WINS Server . . . . . . . : 192.168.2.23
Secondary WINS Server . . . . . . : 192.168.2.25

From the XP Pro client, I can't ping anything on the 192.x.x.x network, and
I also loose access to the Internet.
What do I need to do to get this to work?
Tim

 

[Robert L [MS-MVP]]

1. in this case, you don't logon domain. what you need to do is establish teh vpn.
2. you must have a route command in the pix to point to the 192.168.2.0.
3. By efault, cisco vpn doesn't allow vpn clients access the internet. however, you can setup split tunnel.

For more and other information, go to http://www.ChicagoTech.net
..

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I recommend Brinkster for web hosting!

We need to setup a VPN through our PIX 515 so that a vendor can access their
W2K Pro workstation in our domain and download data to a folder. We think
the PIX is setup right and we're missing something else. To connect to the
PIX VPN, we're using Win XP Pro's Network Connection Wizard to setup the
PPTP VPN connection. If I put the domain name in the login screen, we can't
connect, whereas if I leave it out, we can connect but aren't able to access
the domain. If I do an Ipconfig, I get:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.2.227
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 192.168.2.227
DNS Servers . . . . . . . . . . . : 192.168.2.23
192.168.2.25
Primary WINS Server . . . . . . . : 192.168.2.23
Secondary WINS Server . . . . . . : 192.168.2.25

From the XP Pro client, I can't ping anything on the 192.x.x.x network, and
I also loose access to the Internet.
What do I need to do to get this to work?
Tim