L2TP + Nat device

T

tophre

Per Microsoft: The only supported and recommended scenario is when the
Server is not located behind a NAT device

Does anyone know a way around this? We are trying to establish a VPN
connection using L2TP, I have opened the ports on the firewall but the
connection just isn't happening; PPTP no problem

Chris
 
R

Robert L [MS-MVP]

which ports do you open?

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
Per Microsoft: The only supported and recommended scenario is when the
Server is not located behind a NAT device

Does anyone know a way around this? We are trying to establish a VPN
connection using L2TP, I have opened the ports on the firewall but the
connection just isn't happening; PPTP no problem

Chris
 
T

tophre

Robert,
The ports are configured correctly, my real question is that MSoft says it's not recommended to try this behind a NAT device, however our corp policy insists that our DC stay behind the firewall; is there a way to do it? The ports open are UDP 500,UDP 4500, and ESP 50.
Chris
which ports do you open?

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
Per Microsoft: The only supported and recommended scenario is when the
Server is not located behind a NAT device

Does anyone know a way around this? We are trying to establish a VPN
connection using L2TP, I have opened the ports on the firewall but the
connection just isn't happening; PPTP no problem

Chris
 
R

Robert L [MS-MVP]

I am not aware of this issue. We use L2TP behind Cisco Firewall PIX. However, 1. L2TP needs UDP Port 1701. 2. It is not recommend to enable VPN on DC.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
Robert,
The ports are configured correctly, my real question is that MSoft says it's not recommended to try this behind a NAT device, however our corp policy insists that our DC stay behind the firewall; is there a way to do it? The ports open are UDP 500,UDP 4500, and ESP 50.
Chris
which ports do you open?

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
Per Microsoft: The only supported and recommended scenario is when the
Server is not located behind a NAT device

Does anyone know a way around this? We are trying to establish a VPN
connection using L2TP, I have opened the ports on the firewall but the
connection just isn't happening; PPTP no problem

Chris
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

VPN NAT Transparency 2
L2TP IPSec error 789 & 792 0
L2TP/IPSec VPN tunnel Client -> Server 3
Setup VPN Tunneling To Use L2TP instead of PPTP? 1
no connections to VPN server (L2TP) 2
2003 VPN & NAT 1
How to use NETSH to delete PPTP/L2TP ports? 0
L2TP/IPSEC - error 678 15

Top