i don't know if this would help but you may want to check it out.
this is a post taken from experts-exchange.org
You should check the option on the client's VPN connectoid to "Use gateway on remote network". This should route all traffic to your network.
If you are connected to your ISP full time, then log out and when you log back in, select the checkbox for Logon using Dial Up Networking - here you will select the VPN connectoid to *dial-in* using your domain credentials.
If you are not connected full time and require making the connection to the ISP first, then you need to tweak the registry to keep your connection alive while you're logged off (part of the step above).
Bublitz, I note you specified port 1732 for PPTP in your post. It should be 1723, but I guess it was probably just a typo in your post and not your actual configuration. I think your problem is to do with GRE. The number 47 normally associated with GRE is not a port number, but a protocol number. I've had the same problem myself.
You will need to set up a ACL for the GRE protocol on the PIX. I've never used a PIX before so I got the following config from the CISCO website:
OAH OK. I was reading aticles about GRE and I was getting mad because the weren't specifying UDP TCP ect. There is NO outbound restriction at all right now on the lan so an ACL OUT probably will not help the problem. DO you have to permit GRE in or does it only go out?
Hospice of the Red River Valley
Re: Windows 2003 SBS Server VPN Server
13 years 4 months ago #11002