Can't login Win XP to XP via VPN

[Barry]

Hi,
I have configured an incoming VPN on the (host) PC (running Win XP)
And on the remote PC (also running XP) I have used the wizard to setup a VPN
connection.

When I start the connection, I get asked for UserIS and password, but when I
enter a valid combination (ie one that works when entered directing on the
host) it gets rejected.

Do I have to do anything else to allow remote login?

 

[Sooner Al [MVP]]

Its failing at the VPN login stage? If so did you define a user or users?

http://theillustratednetwork.mvps.org/WM2003/VPN_Server/IncomingConnectionsUsers.JPG

Any other error messages?

--

Al Jarvi (MS-MVP Windows – Desktop User Experience)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375

 

[Barry]

Hi Al, thanks for your fast response,

I'm not sure I understand your question correctly, but ....
There are several user accounts defined on the host - and I can login with
their crentials (when at the host).
When I do the same thing remotely, they fail.

PS - When I defined the VPN I DID select each user as being allowed to login
via the VPN,

 

[Barry]

I've been reading further ...
Do I have to change my 'Group Policies' - 'Remote Desktop Users'
& add users to to allow - 'Members in this group are granted the right to
logon remotely'

(even though they are not going to actually use the 'remote desktop'
facility?)

 

[Barry]

When I run pptpsrv it says:
Error 10048 binding socket:
Created socket for GRE protocol test
LIstening on PROTOCOL 47 for incoming GRE packets ...
----
and running pptpcntl it says (a synopsis):
its created the socket & successfully send the data,
...what's received - is blank
and it says total GRE packets sent = 5
closing down, goodbye.
----

Is this what's expected?

 

[Sooner Al [MVP]]

When I run pptpsrv it says:
Error 10048 binding socket:
Created socket for GRE protocol test
LIstening on PROTOCOL 47 for incoming GRE packets ... ----
and running pptpcntl it says (a synopsis): its created the socket &
successfully send the data, ..what's received - is blank
and it says total GRE packets sent = 5 closing down, goodbye.

Its been a long time since I have run that test so I'll have to test
again (my WHS PPTP server and an XP client) but from the writeup it
says...

"If PPTP traffic can be successfully exchanged between the VPN server and
VPN client computers, Pptpsrv.exe on the VPN server computer will display
the text that was sent by the VPN client computer and an exchange of five
GRE messages. If not, Pptpsrv.exe will indicate what types of PPTP
traffic were unsuccessful."

Did the server receive any text message you sent?

I'll test later and post my results. Unfortunately I can only test over
my LAN.

I presume you test over your local LAN and through any router you have.
The first case just to test your procedure and the latter to test the
actual remote data path.

--

Al Jarvi (MS-MVP Windows - Desktop User Experience)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375

 

[Sooner Al [MVP]]

Ok you can see the results of my test.

Server printout...

http://theillustratednetwork.mvps.org/ScreenShots/PPTP_PingTest/PPTPSrv.jpg

Client printout...

http://theillustratednetwork.mvps.org/ScreenShots/PPTP_PingTest/PPTPClnt.jpg

Anything else is a failure...

--

Al Jarvi (MS-MVP Windows – Desktop User Experience)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375

 

[Barry]

Thanks Al,

I can't get my srv & clnt to give your results ...
But now I read here: http://support.microsoft.com/kb/818043

Excerpt: By default, Windows XP SP2 no longer supports IPsec NAT-T security
associations to servers that are located behind a network address translator.
Therefore, if your virtual private network (VPN) server is behind a network
address translator, by default, a Windows XP SP2-based VPN client cannot make
a L2TP/IPsec connection to the VPN server. This scenario includes a VPN
server that is running Microsoft Windows Server 2003.
---
Does this mean that the microsoft VPN client can't connect to a Win XP that
is behind a router with nat (as mine is?
--
Thanks ... Barry

Ok you can see the results of my test.

Server printout...

http://theillustratednetwork.mvps.org/ScreenShots/PPTP_PingTest/PPTPSrv.jpg

Client printout...

http://theillustratednetwork.mvps.org/ScreenShots/PPTP_PingTest/PPTPClnt.jpg

Anything else is a failure...

--

Al Jarvi (MS-MVP Windows – Desktop User Experience)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375

 

[Sooner Al [MVP]]

Well, I thought you were talking about running a PPTP VPN server on an XP
box (either behind a NAT or directly connected to the public internet) with
an XP client? That definitely works. I have never been able to figure out
how to run a L2TP/IPsec server on an XP box. I don't think you can. Beyond
that L2TP/IPsec and PPTP are two totally different VPNs so that has no
bearing on PPTP anyway.

If you can't get PPTP VPN to work then alternatives include

* changing your router to one that is known to support PPTP VPN pass through

* upgrading firmware in your router to a version known to support PPTP VPN
pass through

* use third-party firmware like DD-WRT (which includes a built-in PPTP,
OpenVPN or SSH server function) on a supported router

* Secure Shell [SSH] (which in my opinion is very easy for home users to
setup and use) on a XP/Vista server PC

* OpenVPN

* SSL-Explorer

* setup a Windows Home Server at home

* use a third-party solution like Hamachi

Personally I have used all of these alternatives excluding Hamachi. I
currently run a Windows Home Server [WHS] and have access to shared
files/folders on the WHS via a SSL VPN tunnel or desktop PCs on my LAN via
the WHS Remote Desktop proxy.

--

Al Jarvi (MS-MVP Windows – Desktop User Experience)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375

Thanks Al,

I can't get my srv & clnt to give your results ...
But now I read here: http://support.microsoft.com/kb/818043

Excerpt: By default, Windows XP SP2 no longer supports IPsec NAT-T
security
associations to servers that are located behind a network address
translator.
Therefore, if your virtual private network (VPN) server is behind a
network
address translator, by default, a Windows XP SP2-based VPN client cannot
make
a L2TP/IPsec connection to the VPN server. This scenario includes a VPN
server that is running Microsoft Windows Server 2003.

 

[kazanç evi]

Dell all our best deals
Dell toutes nos meilleurs offres
Dell alle unsere Top-Angebote
Dell todas nuestras mejores ofertas
Dell alle vores bedste tilbud
Dell kaikki parhaamme käsitellään
Dell tutte le nostre migliori offerte
戴尔我们所有的最佳交易
戴爾我們所有的最佳交易
ë¸ì˜ 모든 ìµœì„ ì˜ ê±°ëž˜
Dell بكل ما نملك من اÙضل الصÙقات

http://www1.euro.dell.com/content/default.aspx?c=fr&l=en&s=dhs&dgc=AF&cid=5676&lid=137598