RAS Connection Issues

[Guest]

I have a Win2k server and I have set up RRAS for VPN connections via IP over
a cable modem connection (Comcast). I have a dLink 524 router and have
pointed port 1723 to the server. This router is already preset for PPTP
connections and even mentions GRE protocols so I don't see a problem with
this router and VPN as long as I do the 1723 port forwarding.

When I go to an outside client (at my office) I set up a VPN connection to
my IP and pass in Windows login credentials. I get the message that I am
connecting and "verifying User Name and Password" and it just stops there.
After reading some other posts everything indicates that my issues center
around GRE protocols in the VPN packets.

What am I missing? Is this GRE related and how can I verify where it is
getting blocked? What logs can I look at (on the server or the client) so I
can trace what is happening? Is there something I missed and should/should
not do when I set up the RRAS on the server?

Thanks!

-Richard K

 

[Robert L [MS-MVP]]

what's the error code? this may help,
http://www.chicagotech.net/VPN process.htm

--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
Networking Solutions, http://www.chicagotech.net/networksolutions.htm
VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
VPN Process and Error Analysis, http://www.chicagotech.net/VPN process.htm
VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
This posting is provided "AS IS" with no warranties.

 

[Guest]

Error 721

what's the error code? this may help,
http://www.chicagotech.net/VPN process.htm

--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
Networking Solutions, http://www.chicagotech.net/networksolutions.htm
VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
VPN Process and Error Analysis, http://www.chicagotech.net/VPN process.htm
VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
This posting is provided "AS IS" with no warranties.

 

[Guest]

One more piece of evidence. I put a software sniffer on my RAS server and
watched the traffic. When I try and connect to the RAS server internally
from one of my other client computers I see GRE packets. When I try the same
thing from an outside firewall address I see no GRE packets processed so I
have a strong belief that is where the problem is but that leads me to a
question... Here's the scenerio.

(Outside client)
Windows XP Client 192.168.1.50
Linksys Router
Internal IP 192.168.1.1
External IP 68.49.100.xxx
|
Internet
|
(Internal)
dLink Router
External IP 68.49.83.xxx
Internal IP 192.168.1.1
port 1723 open to 192.168.1.100
RRAS Server 192.168.1.100

On my server side I think I have all the proper configurations for server
and router in port forwarding and protocol 47. BUT when hitting from the
outside what about that other Linksys router? Do I have to open anything up
on him? Is it possible that he is stopping GRE packets? How do I trace
where the problem lies?

Thanks!

-Richard K

 

[Bill Grant]

721 usually indicates a GRE problem. Anything in the path blocking GRE
will cause this problem. The encrypted data is inside a packet with a GRE
header. No GRE, no data transfer, no VPN.