Novice trying to setup VPN on XP with Linkys Router

[Darleen]

I have a Desktop at my office connected to the Internet via DSL with a
Static IP address. The modem is connected to a wireless router. We
have several laptops in the office and they all connect wirelessly to
this desktop in order to use it's hard drive space, printers, etc...
This office network is configured using Windows Workgroups and it
works fine.

I am trying to now connect to our office's network remotely (ie from
home) and I want to use the Windows XP VPN feature. I've configured
an Incoming Connection on the desktop according to all the tutorials,
and setup the usernames and passwords I want to allow in. Then on my
laptop I've configured a VPN connection to login to the desktop.

Everytime I try to login I get Error 800: unable to establish the VPN
connection. I temporarily disable every firewall on every connection
during setup attempts. Norton has been removed. I've even tried
wiring the laptop directly into the modem to see if the problem was in
the router, and it still didn't work. I can't figure out what is
wrong! Can anyone suggest things for me to troubleshoot? I'm a
novice at IP addresses and this type of networking, so I don't really
know where to start.

Here are my settings:

Remote connection computers (laptops):
HP laptops with Windows XP that connect to various ISP's when on the
road and always with dynamic ISPs

Desktop at office to connect into:
Windows XP Professional
Router is Linksys WRT54GS and the Internet type on the router's web
interface is set to Static IP
Modem is DSL (cavtel.net, brand Zhone)
Local IP Address is 192.168.1.1
Internet IP address is 76.160.85.164 (static IP from our ISP)
Internet default gateway is 76.160.85.129
DNS 1 is 64.83.0.10 (have no idea what this is used for)
DNS 2 is 64.118.139.49 (have no idea what this is used for)


My VPN connection on the desktop is set to connect to:
76.160.85.129. Is this right? Do we use the gateway IP address here
or the Internet IP address here? I've tried both actually, neither
works. And under properties for this VPN connection - I've accepted
most defaults, including letting TCP/IP obtain IP & DNS
automatically. Is this right?

I've verified that the password and usernames match between the
Incoming Connection users specified on the desktop and my laptop VPN
connection.

Can anyone steer me in the right direction?

Thanks
Darleen

 

[Sooner Al [MVP]]

I have a Desktop at my office connected to the Internet via DSL with a
Static IP address. The modem is connected to a wireless router. We
have several laptops in the office and they all connect wirelessly to
this desktop in order to use it's hard drive space, printers, etc...
This office network is configured using Windows Workgroups and it
works fine.

I am trying to now connect to our office's network remotely (ie from
home) and I want to use the Windows XP VPN feature. I've configured
an Incoming Connection on the desktop according to all the tutorials,
and setup the usernames and passwords I want to allow in. Then on my
laptop I've configured a VPN connection to login to the desktop.

Everytime I try to login I get Error 800: unable to establish the VPN
connection. I temporarily disable every firewall on every connection
during setup attempts. Norton has been removed. I've even tried
wiring the laptop directly into the modem to see if the problem was in
the router, and it still didn't work. I can't figure out what is
wrong! Can anyone suggest things for me to troubleshoot? I'm a
novice at IP addresses and this type of networking, so I don't really
know where to start.

Here are my settings:

Remote connection computers (laptops):
HP laptops with Windows XP that connect to various ISP's when on the
road and always with dynamic ISPs

Desktop at office to connect into:
Windows XP Professional
Router is Linksys WRT54GS and the Internet type on the router's web
interface is set to Static IP
Modem is DSL (cavtel.net, brand Zhone)
Local IP Address is 192.168.1.1
Internet IP address is 76.160.85.164 (static IP from our ISP)
Internet default gateway is 76.160.85.129
DNS 1 is 64.83.0.10 (have no idea what this is used for)
DNS 2 is 64.118.139.49 (have no idea what this is used for)


My VPN connection on the desktop is set to connect to:
76.160.85.129. Is this right? Do we use the gateway IP address here
or the Internet IP address here? I've tried both actually, neither
works. And under properties for this VPN connection - I've accepted
most defaults, including letting TCP/IP obtain IP & DNS
automatically. Is this right?

I've verified that the password and usernames match between the
Incoming Connection users specified on the desktop and my laptop VPN
connection.

Can anyone steer me in the right direction?

Thanks
Darleen

This may be a problem with port forwarding on the office Linksys router. You
need both TCP Port 1723 (PPTP) and GRE Protocol 47 traffic to pass through
the router. Linksys generally calls that "PPTP Pass Through". Look in the
router config pages. You can test this by running the test detailed in the
"PPTP Ping" and "VPN Traffic" sections on this page...

http://technet.microsoft.com/en-us/library/bb877965.aspx

If the router does not pass GRE Protocol 47 traffic your options include (in
no particular order)...

* Update the router firmware from the manufacturer to see if that fixes the
issue.
* Replace the router with a router that is known to pass GRE Protocol 47
traffic.
* Flash the router with third-party firmware like DD-WRT that supports PPTP
VPN.
* Purchase a VPN end-point type router that supports PPTP, IPsec/L2TP or SSL
VPN types.
* Use an alternative VPN like OpenVPN, SSL-Explorer or a Secure Shell (SSH)
connection.

To call the VPN server from home, and assuming port forwarding is working
correctly you use the public IP of the router.
--

Al Jarvi (MS-MVP Windows - Desktop User Experience)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375

 

[argau]

re

Darleen, the solution to your problem is simple. You are trying to connect to your default gatway, you should try to connect to the internet ip address before messing araound with port forwarding.

 

[Rob]

Al,

I am having a different issue. I am getting error 800 when trying to login
via vpn. I can log in from a different computer but this one will not let me
so I know it is not the server. I have tried to remove the vpn connection
and add it back with no luck. My Windows Firewall is turned off so I know it
is not that. Is there anything else that coud be blocking it on the laptop?

Any help would be appreciated.

Rob

 

[Rob]

Al,

I am not sure if received the first try at posting this question. I
apologize if this is a repeat. I am getting an error 800 when connecting to
my office vpn on my laptop. I know that it is not the server since I can log
on via another computer. I have turned off the Windows Firewall on the
laptop - no luck. I have even tried to delete the connection and adding it
back. Anything else that I should check?

Any help would be greatly appreciated.

Rob

 

[argau]

security

Rob,
make sure you are using the right encryption , connection>properties>security>advanced, make sure you using the same kind of encrytion on both ends of the VPN. Somtimes restart of the server and the pc helps too