XP PPTP VPN Error 721

B

Bob

We are at the point where we attempt to complete the connection. but
it gets stuck on Error 721.

What is causing that?


--

Map Of The Vast Right Wing Conspiracy:
http://www.freewebs.com/vrwc/

You know you are in Hell when you have to make a
distinction between what is moral and what is legal.
 
M

Marc Reynolds [MSFT]

Make sure that all routers and firewalls are configured to pass TCP port
1723 and IP Protocol 47 (GRE).

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.
 
B

Bob

Make sure that all routers and firewalls are configured to pass TCP port
1723 and IP Protocol 47 (GRE).

That has been done.

I sit at my desk at home and attempt to connect as the VPN Client. My
partner sits at his office where the VPN Server is, and we watch the
packets come in.

The connection progresses to the point where I get the message about
"Verifying username and password". Then after a while I get Error 721.

I am logged into my machine as the "vpnclient". The VPN Server has a
User named "vpnclient" and has extended permission to that user to
connect on the VPN.

I have done this PPTP thing several times before so I believe we have
everything set up correctly. I just wish Windows would give better
diagnostics so I would not have to chase phantoms.

What is the most common cause of this problem?

--

Map Of The Vast Right Wing Conspiracy:
http://www.freewebs.com/vrwc/

You know you are in Hell when you have to make a
distinction between what is moral and what is legal.
 
B

Bob

So--what about those routers, firewalls, etc?

I assume, based on past experience, that there is no router or
firewall issue with the VPN Client. The only router/firewall problems
are on the Server side of the connection. Just to make absolutely
sure, I put the Client in the DMZ - and it made no difference.

The router is a brand new Netopia 3546 Cayman DSL router installed by
SBC (Southwestern Bell) as part of their DSL service. We asked Netopia
tech support to Telnet into it and check our configuration. We had
forwarded port 1723 to static IP address 192.168.1.100 on the LAN,
which is the VPN Server. We also enabled PPTP Passthru in the router.
In addition we restricted the LAN DHCP in the router to an address
range 192.168.1.1 - 192.168.1.50. That way no one would be able to
take 192.168.1.100 in case the VPN Server machine was offline. Netopia
tech support took a look at all this and said everything was set up
correctly for PPTP VPN Passthru.

Earlier we were getting Error 678, the "No Connection" error. The man
at the office looked in the process tableon the VPN Server and
discovered that, although we had exited a firewall program, something
associated with it was still running. He killed that process and then
we were able to make some headway.

Now I, at another location running the VPN Client, was able to get
beyond Error 678 and begin to "Verify username and password". But it
would terminate there with Error 721.

I removed the password from the VPN Client connection dialog to see if
it was the username or the password that was causing the problem.
Everything was the same as before, so I assume that the VPN Server is
not able to verify the username and never gets to the password.
You've done it before, so you know what needs to be done--what is different
about the hardware/software in this set of links?

The VPN Server I set up for test purposes the other day was on Win2K.
The VPN Client was XP. Now the situation is reversed in terms of
operating system versions. Also, the other machine is a different
machine in a different environment.

Why would the VPN Server not be able to verify the VPN Client
username?

Is this a matter of another firewall blocking the process of username
verification or is this an XP VPN configuration issue?

Or does the fact that we are making it to verification rule out any
blocking from a firewall?


--

Map Of The Vast Right Wing Conspiracy:
http://www.freewebs.com/vrwc/

You know you are in Hell when you have to make a
distinction between what is moral and what is legal.
 
B

Bob

You might want to tell us more about what you're trying to set up.

Since I last posted here, I believe I may have stumbled onto something
I need to ask everyone.

When I set up my Win2K machine at my home, I used the default
Workgroup called "WORKGROUP" for the peer-to-peer network. The
Workgroup for the VPN Server at the business office is an XP machine
which was set up with a different Workgroup name. I do not know that
name at the moment - but I will soon.

Does that make any difference in "Verifying username and password"?

If so, I will have to change the Workgroup for my machine - how do I
go about doing that?

This should not be an issue because the other day when I set up the
VPN Server on my machine, my associate was able to connect from his
home using an XP machine with a different Workgroup name. But I wanted
to run this by everyone just in case.


--

Map Of The Vast Right Wing Conspiracy:
http://www.freewebs.com/vrwc/

You know you are in Hell when you have to make a
distinction between what is moral and what is legal.
 
J

Jeffrey Randow (MVP)

Have you changed firmware releases or upgraded the software on your
firewall/gateway device? This sounds like the PPTP Passthrough / GRE/
IP 47 is not enabled....

Jeffrey Randow (Windows Net. & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone
 
G

gallai

Guys
I think I found the solution!
I've been struggling with the same problem, until I realized I didn'
pay attention to the details.
When you configure your router to map your VPN ports, don't use th
private IP assigned to your server's network card. Instead, ru
IPCONFIG on your server, and you'll see that Windows aquired a
ADDITIONAL IP ADDRESS (called RAS....something) from your DHCP. Us
this IP in your router config and everything will be smooth.

Gre


-
galla
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

VPN Question 5
XP PPTP VPN Testing 3
PPTP Passthru 3
XP PPTP VPN Share Problem 14
XP PPTP VPN IP Address 4
PPTP VPN Static IP Address Problem 8
PPTP VPN stops working on XP SP3 3
Windows XP Expert Companion Book 2

Top