intermitant pptp connection problem

[scott]

Hi,

Im still getting a problem with PPTP connections causing error 650 and 720
from 98 and 2000 respectivly. My testing has shown the following:

(My setup involves 2ksp3 server behind firewall and 2 external connecting
clinets, one on 2k other on 98).

From external IP 1 a windows 2000 machine connnected.
From external IP 1 a windows 2000 machine manually disconnected.
From external IP 1 a windows 2000 machine connnected.
From external IP 1 a windows 2000 machine manually disconneted.

Seemed to be working fine.

From external IP 1 a windows 2000 machine connnected.
From external IP 2 a windows 98 machine could not connect.
From external IP 1 a windows 2000 machine manually disconnected.
From external IP 2 a windows 98 machine could connected.
From external IP 1 a windows 2000 machine could not connect.
From INTERNAL LAN an XP clinet could connect then manually disconnected.

Seemed to suggest only 1 machine could connect from external source. 10 mini
wan ports are avaialble on ras server. I will try multi 2000 and XP machines
soon.

From external IP 2 a windows 98 machine manually disconnected.
From external IP 2 a windows 98 machine could not connect.
From external IP 1 a windows 2000 machine could not connect.

Windows 2000 machines can connect on and off until 98 connected. I will need
to try multiple 2000 clinets also.

Not sure what to do from here. After several hours the 2000 pptp connection
will work again. I guess somthing must be reset.

Thanks
Scott.

 

[scott]

Got a better test:

NET
v
ROUTER
v
ROUTER > win2k clinet (WS012)
v
FIREWALL
v
RAS SERVER

- The win2k clinet (WS012) on the middle router (DMZ) can ALWAYS establish a
PPTP connection to RAS SERVER.
- This connection passes through the FIREWALL.
- Once this connection has been made all other external PPTP WIN2k clients
can connect.
- After WS012 disconnects and after several mins all external WIN2k that
attempt connection get error 721.

What the heck is going on ?

Thanks for any information at all.
Scott.

 

[scott]

Got a better test:

NET
v
ROUTER
v
ROUTER > win2k clinet (WS012)
v
FIREWALL
v
RAS SERVER

- The win2k clinet (WS012) on the middle router (DMZ) can ALWAYS establish a
PPTP connection to RAS SERVER.
- This connection passes through the FIREWALL.
- Once this connection has been made all other external PPTP WIN2k clients
can connect.
- After WS012 disconnects and after several mins all external WIN2k that
attempt connection get error 721.

What the heck is going on ?

Thanks for any information at all.
Scott.

 

[scott]

External WIN2k clinets get 720 error.

NET
v
ROUTER
v
ROUTER > win2k clinet (WS012)
v
FIREWALL
v
RAS SERVER

- The win2k clinet (WS012) on the middle router (DMZ) can ALWAYS establish a
PPTP connection to RAS SERVER.
- This connection passes through the FIREWALL.
- Once this connection has been made all other external PPTP WIN2k clients
can connect.
- After WS012 disconnects and after several mins all external WIN2k that
attempt connection get error 720.

What the heck is going on ?

Thanks for any information at all.
Scott.

 

[scott]

futher testing showed:

win98 on external ip connect ok (firewall report PPTP 1723 + GRE)

win 98 manually disconet, reconnect (frewall report PPTP 1723 only)

Its like GRE was lost during the second connection. IE second time GRE did
not make it as far as the FIREWALL.

Im checking middle ROUTER.