VPN Trouble

[Apparition]

I am trying to establish a VPN server using a Windows 2000
Server box which is connected to the net via a NetGear
DG834 Router/Modem.

I have installed and configured the Routing and Remote
Access service, enabled access for the account I am using
in Active Directory, and created appropriate Firewall
rules to open the 1732 and 500 VPN ports for PPTP
communication.

When I try to connect using a Win 2000 Pro client which is
using a dial-up connection, I get an Error message
721 "The remote computer is not responding".

There is nothing glaringly obvious in the access profiles
or authentication settings, I have tried using no
encryption and even no authentication and same problem
still occurs.

Any help on this would be greatly appreciated!

Thanks,

 

[Ozone]

What you need to do is use a sniffer to look at the packets to see where
they are getting dropped. If you could use something like Ethereal to get a
dump, and post it, I could look at it.

http://www.ethereal.com/

Ozone.

 

[Marc Reynolds [MSFT]]

You need to open TCP port 1723 (NOT 1732) and allow IP Protocol 47 (GRE).
You do not need TCP or UDP 500 open for PPTP.

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Trislam]

Hello,

I see the error message is "721 - The remote computer is not responding". I
thought Port 1724 had to be opened on the Host VPN Server side so the SVR
can receive a VPN connection? And, port 1723 opened, if necessary on the
Remote side.

Trislam

 

[Marc Reynolds [MSFT]]

You do not need TCP port 1724 just 1723. The client will connect to the PPTP
server be sending a tcp packet destined to port 1723 og the PPTP server. The
server responds back from tcp 1723 to whatever port the client sent from.

You also need to make sure your routers and firewalls allow IP Protocol 47
(GRE).

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Trislam]

Thanks for the info Marc!

You do not need TCP port 1724 just 1723. The client will connect to the PPTP
server be sending a tcp packet destined to port 1723 og the PPTP server. The
server responds back from tcp 1723 to whatever port the client sent from.

You also need to make sure your routers and firewalls allow IP Protocol 47
(GRE).

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.


responding".