I after doing some digging, I think the problem lies in the fact that
the Cisco may not be handling the GRE packets correctly. Once the tunnel
opens up the Router doesn't PAT those packets.  I am going to take this
up with Cisco.  If any of you have heard of this and have a fix let
please let me know.


Thanks,



Andrew Eaton



-----Original Message-----
From: Eaton, Andy 
Sent: Tuesday, March 30, 2004 12:16 PM
To: m0n0wall at lists dot m0n0 dot ch
Subject: [m0n0wall] Problem with pptp and 6509 Nat overload

Hello,

I haven't seen this question in any of the old posts yet.

I am a network and security engineer at Washington University in St.
Louis MO.  We have a Cisco 6509 that has several internal LAN's that
port address translate to one ip, ie overload to one ip in Cisco speak.
The problem is one of my users has an external m0n0wall at his home.
The m0n0wall is running the pptp server on it locally, not port
forwarding to another machine behind his nat.  From the Cisco PAT space,
I cannot complete a connection, however from a real ip address
everything works fine.  Behind the Cisco Pat space the connection tries
to authenticate but then dies with a 619 error.

I am about to go digging for an answer but I wanted to ask if anyone
knew anything here first.

Thanks,



Andrew Eaton

---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch