Netgear RP614 V3 PPTP only works in DMZ.

[No NickName]

I'm having trouble getting an incoming VPN connection working when my
Windows XP machine is not in the DMZ. I have forwarded port 1723 to
the correct IP and still nothing (Also tried 1701, 500 (However I
understand that PTPP only uses 1723 anyway)). As soon as I move the
machine to the DMZ everything works perfectly.

Does VPN pass through only work in the DMZ (for this router) or am I
missing a something?

 

[Sooner Al [MVP]]

No, you also need to enable GRE Protocol 47 traffic for a PPTP VPN tunnel,
sometimes called "PPTP Pass Through" or "VPN Pass Through", on the router.
Consult your users manual or the Netgear support web pages. I have found
that support for GRE Protocol 47 traffic with consumer grade routers can be
problematic at best. It can be highly dependent on what firmware version you
run in the router. Some work, others do not.

You might search/post to the Broadband Reports Netgear forum for help...

http://www.broadbandreports.com/forum/netgear

An alternative is to run a SSH or SSL VPN instead. Personally I use a SSH2
tunnel, with a 2048-bit RSA private/public key for authentication, to access
my home LAN because of issues with my Buffalo WBR-G54 and getting GRE
Protocol 47 traffic through it.

http://sshwindows.sourceforge.net/
http://www.bitvise.com/tunnelier.html

http://3sp.com/showSslExplorer.do

Close ports 1701 and 500...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual
benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[No NickName]

Thanks for your info!

No, you also need to enable GRE Protocol 47 traffic for a PPTP VPN tunnel,
sometimes called "PPTP Pass Through" or "VPN Pass Through", on the router.
Consult your users manual or the Netgear support web pages. I have found
that support for GRE Protocol 47 traffic with consumer grade routers can be
problematic at best. It can be highly dependent on what firmware version you
run in the router. Some work, others do not.

You might search/post to the Broadband Reports Netgear forum for help...

http://www.broadbandreports.com/forum/netgear

An alternative is to run a SSH or SSL VPN instead. Personally I use a SSH2
tunnel, with a 2048-bit RSA private/public key for authentication, to access
my home LAN because of issues with my Buffalo WBR-G54 and getting GRE
Protocol 47 traffic through it.

http://sshwindows.sourceforge.net/
http://www.bitvise.com/tunnelier.html

http://3sp.com/showSslExplorer.do

Close ports 1701 and 500...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the mutual
benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...