HELP: VPN Connection not working

[xitiz7728]

Hi,
I have included default VPN component in the XPE image. I am attempting
to establish a VPN connection before a user logs in by installing a
service using RAS APIs. The VPN connection works perfectly fine on XP
Professional, but fails on Windows XP Embedded with an error code ERROR
619. Am I missing some component? Please help!!

Thanks in advance.
Kits.

 

[KM]

Kits,

I never saw the error you mentioned but just a quick search gave me the following links:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q314485, http://support.microsoft.com/kb/227747
http://www.howtonetworking.com/vpnissues/error619.htm

Since you mentioned the same server works fine with XP Pro client (right?) I assume the RRAS server there has been added to the
Active Directory.
Perhaps you didn't get RRAS service started on you XPe image? You can easy verify that.

If it is RRAS issue, you should read lots of posts about it:
http://groups.google.com/group/micr...osoft.public.windowsxp.embedded&q=RRAS&qt_g=1.
You will find some components you need here: http://groups.google.com/group/microsoft.public.windowsxp.embedded/msg/d136d198fe5739ae

 

[xitiz7728]

KM,

Thanks for your response, I got to the root cause of the problem (but
not solution!!!).

I wrote a GINA module to establish the VPN connection before logon and
tested it on XPE SP1 and it worked fine, but failed (ERROR 619) on XPE
SP2. If I stop the firewall service on SP2 it works fine.(I tried
icfutil /closeservices but it didnt work had to disable the service
through services.msc). So problem = firewall. How do I configure the
firewall to allow only VPN traffic?

Please HELP!

Thanks in advance
Kits.

 

[xitiz7728]

KM,
KM,

Thanks for your response, I got to the root cause of the problem (but
not solution!!!).

I wrote a GINA module to establish the VPN connection before logon and
tested it on XPE SP1 and it worked fine, but failed (ERROR 619) on XPE
SP2. If I stop the firewall service on SP2 it works fine.So problem =
firewall. How do I configure the
firewall to allow only VPN traffic?

I have opened the port 1723 and disabled firewall for the connection in
Network Connections (by using "netsh firewall set opmode mode = DISABLE
interface = MYVPNCONNECTION") but still I get the error.

Please help!!

Thanks and regards
Kits.

 

[xitiz7728]

KM,

Thanks for your response, I got to the root cause of the problem (but
not solution!!!).

I wrote a GINA module to establish the VPN connection before logon and
tested it on XPE SP1 and it worked fine, but failed (ERROR 619) on XPE
SP2. If I stop the firewall service on SP2 it works fine.So problem =
firewall. How do I configure the firewall to allow only VPN traffic?

I have opened the port 1723 and disabled the firewall for the
VPNConnection using "netsh firewall set opmode mode = DISABLE interface
= MYVPNCONNECTION" but to no avail. Please help!!

Thanks in advance
Kits.

 

[KM]

Kits,

Did you allow Protocol 47 to passthru the firewall?

On Windows Firewall Advanced setting page for connection you're changing turn on Incoming Connection VPN (PPTP) checkbox.

 

[xitiz7728]

KM,
How Do i enable protocol 47? There is no such option on the Advanced
Firewall setting page.

 

[KM]

This means you probably did not include the protocol (PPTP components) in your configuration.

Also, you will have to make sure the protocol gets bind to the adapter (your connection). It is either going to do that
automatically during installation (FBA) or you'll have to do that manually with a tool like netsh.