VPN Server in PIX DMZ

[jrpayne]

Hello All,

My question concerns placing a Microsoft Server 2003 terminal server in a PIX DMZ. The users that use this terminal server can successfully use it if they do a RDP connection to the outside address. However, if they use a VPN connection, they will not receive a DHCP address because the server itself says that it cannot contact a DHCP server to grab the addresses. I can however ping the IP of the DHCP server from the TS in the DMZ. Our PIX also has its own VPN solution and I realize that we could force everyone to use the Cisco VPN client and access the network via that method but, not all of our software will work with the client. Does anyone have any ideas or suggestions about what is wrong? I am for the most part a PIX newbie but would like to get to the point of being well versed in PIX configs and this is one that has me stumped. Any help is greatly appreciated.

Jimmy Payne

 

[NetworkGhost]

Post a running config. I kind of get what your trying to do but would like to confirm. You have a VPN Server in your DMZ (PPTP?) and a Terminal Server? You want you users that connect to the VPN server to also be able to connect to the terminal server?

If so are the external addresses hard coded to the DMZ or are you doing NAT?

Free Firewall/Network/Systems Support-

http://firewalls.ath.cx:8080

 

[jrpayne]

Thank you for you help. I now have it figured out. Thanks again.