error 721 when initiating VPN

[james]

I am getting the error 721 when dialing in from a few sites through a
PBX, i get a connection to the internet.



The VPN with Windows XP client works well on several places from where
I've tried except from two: I get a timeout message with error 721
after the client waits on "Verifying username & password...".



The odd thing is that it has found the server but hangs on the
username/password control which both work well from other places...



I've yet tried to log the connection but the file is empty, even with
full-logging options.



we have 10 remote users all with the same settings, 8 of which are
fine 2 arn't.



the two that arn't can work elsewhere successfuly.



the 2 sites use analogue pbx's and supply us a phone line, we can use
this to connect to the internet fine. I'm i missing something.

 

[Sharoon Shetty K [MSFT]]

Can you check if the router or firewall between the client and the VPN
Server has blocked GRE for the clients failing with 721? This is required
for successfully establishing the PPTP VPN connection since the encrypted
VPN data travels as the payload of an IP packet with a GRE header.

 

[james]

I am getting the error 721 when dialing in from a few sites through a
PBX, i get a connection to the internet.



The VPN with Windows XP client works well on several places from where
I've tried except from two: I get a timeout message with error 721
after the client waits on "Verifying username & password...".



The odd thing is that it has found the server but hangs on the
username/password control which both work well from other places...



I've yet tried to log the connection but the file is empty, even with
full-logging options.



we have 10 remote users all with the same settings, 8 of which are
fine 2 arn't.



the two that arn't can work elsewhere successfuly.



the 2 sites use analogue pbx's and supply us a phone line, we can use
this to connect to the internet fine. I'm i missing something.

thanks for the reply sharoon,

we are using a NETGEAR FVS318 Prosafe VPN Firewall, this is used
successfuly by staff on remote sites every day,something has changed
somewhere,the users that are having the issue can vpn in to the same
IP address from other sites i.e home, the isp is tiscali on all the
machines,after speaking to the IT person on one of the sites , he said
that the phone line goes through a normal analouge pbx,there is no
problem connecting to the internet through this.

thought

could gre headers be stripped off a packet by the ISP or going through
a PBX?

I'm nearly at a loss, but you know how it is, it's good to beat it.

over to you

 

[james]

I am getting the error 721 when dialing in from a few sites through a
PBX, i get a connection to the internet.



The VPN with Windows XP client works well on several places from where
I've tried except from two: I get a timeout message with error 721
after the client waits on "Verifying username & password...".



The odd thing is that it has found the server but hangs on the
username/password control which both work well from other places...



I've yet tried to log the connection but the file is empty, even with
full-logging options.



we have 10 remote users all with the same settings, 8 of which are
fine 2 arn't.



the two that arn't can work elsewhere successfuly.



the 2 sites use analogue pbx's and supply us a phone line, we can use
this to connect to the internet fine. I'm i missing something.

thanks for the reply sharoon,

we are using a NETGEAR FVS318 Prosafe VPN Firewall, this is used
successfuly by staff on remote sites every day,something has changed
somewhere,the users that are having the issue can vpn in to the same
IP address from other sites i.e home, the isp is tiscali on all the
machines,after speaking to the IT person on one of the sites , he said
that the phone line goes through a normal analouge pbx,there is no
problem connecting to the internet through this.

thought

could gre headers be stripped off a packet by the ISP or going through
a PBX?

I'm nearly at a loss, but you know how it is, it's good to beat it.

over to you

 

[james]

Hi Sharoon, thanks for the reply,

We use a Netgear FVS318 Prosafe VPN Firewall, and have been for the
last year with no issues,and since this issue seems to be only from
two remote sites, i'm inclined to belive that the problem is either
connected to the PBX's at the site or something to do with the ISP,
all other users have the same ISP and can connect no problem, there is
no protocol blocking on our side (to my knowledge) and if there was,
wouldn't all users be facing the same problem?

i'm at the end of my rope (help)

a thought

could the PBX's on site be responsible, or could they be stripping off
the GRE headers?

any other thoughts are most welcome. thanks again.

 

[james]

thanks for the reply sharoon,

we are using a NETGEAR FVS318 Prosafe VPN Firewall, this is used
successfuly by staff on remote sites every day,something has changed
somewhere,the users that are having the issue can vpn in to the same
IP address from other sites i.e home, the isp is tiscali on all the
machines,after speaking to the IT person on one of the sites , he said
that the phone line goes through a normal analouge pbx,there is no
problem connecting to the internet through this.

thought

could gre headers be stripped off a packet by the ISP or going through
a PBX?

I'm nearly at a loss, but you know how it is, it's good to beat it.

over to you

PROBLEM FIXED

had to put 1740, in front of the telephone number, cli was blocked
from the Pbx,what was throwing me was that the internet connection was
up,some ISP's must just ignore this, i was under the impression that
theIsp's needed cli turned on when the connection is a dial-up, so
that they know who to bill for the airtime.

well there you go,thanks for your thoughts