Internal interface shows as non-opertational

[Andy Hill]

Sorry if this is going over old ground but I can't find an
answer anywhere else.

We have set up VPN server on a win2k box, the internal
interface shows as non-operational, with no IP address
assigned. No VPN clients can connect, message error 721
the remote computer is not responding.

I'm probably missing something really obvious, but can't
find the answer anywhere else.

Thanks in advance
Andy Hill

 

[Marc Reynolds [MSFT]]

Hi Andy,

Are the clients or server behind a firewall? Make sure that TCP port 1723
and IP Protocol 47 (GRE) are open on any routers and firewalls between the
clients and server. Can a client on the LAN with the VPN server connect?

The Internal interface will show as non-operational until a client
connection is made.

241398 RRAS Console Displays an "Internal" Routing Interface
http://support.microsoft.com/?id=241398

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Andy Hill]

Hi Marc

There is indeed a firewall involved at the server end we
have ports 1723TCP and 500UDP open but I had never heard
of port 47 in this context, and indeed I have never opened
it on other installations which work...But of course I'll
try it.

Thanks for the info on the non-operational interface..I
had never noticed that it showed this state before, and
thought that this was the cause of the non connection
problem

Regards
Andy

 

[Marc Reynolds [MSFT]]

Hi Andy,

FYi - GRE isn't a port, it is a protocol - IP Protocol 47. Some firewalls
and routes may refer to it as PPPT pass through.

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Thanks Marc

That will be the answer, in the past I have used firewalls
specifically designed to pass through VPN connections. The
one being used in this case is a different model and will
need this enabling manually.

Andy