RAS via single network adapter

[Arnold]

Here's the set-up. Windows 2000 server with single network adapter
behind a NAT router. The server's network adapter has two different
IP Addresses assigned to it. The router is configured to forward port
1723 to the second IP address on this server. The server can accept
VPN connections and everything seems to work fine. Remote users can
connect to the Internet and then establish a VPN to this server and
access the resources on it.

My problem: I can't duplicate this setup on my own Windows 2000 or
2003 servers. When I try connecting, it just hangs at the 'Verifying
password' part. I think I configured everything right, but can't be
100% sure since I had nothing to do with setting up the working one.

I didn't find anything in the MS KB about this scenario. Is there a
write-up or some kind of checklist I can use to configure my server?

My laptop is running XP Pro.

Thanks for any info.

Arnold...

 

[Robert L [MS-MVP]]

assuming you receive error 721 or 800.and you have a router or firewall this could be the hardware issue or GRE issue. this link may help,

vpn process and errors The Analysis of VPN Process and The Meaning of The Errors. Establishing a VPN connection includes the following four processes, and you may receive some ...
www.chicagotech.net/VPN%20process.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Here's the set-up. Windows 2000 server with single network adapter
behind a NAT router. The server's network adapter has two different
IP Addresses assigned to it. The router is configured to forward port
1723 to the second IP address on this server. The server can accept
VPN connections and everything seems to work fine. Remote users can
connect to the Internet and then establish a VPN to this server and
access the resources on it.

My problem: I can't duplicate this setup on my own Windows 2000 or
2003 servers. When I try connecting, it just hangs at the 'Verifying
password' part. I think I configured everything right, but can't be
100% sure since I had nothing to do with setting up the working one.

I didn't find anything in the MS KB about this scenario. Is there a
write-up or some kind of checklist I can use to configure my server?

My laptop is running XP Pro.

Thanks for any info.

Arnold...

 

[Bill Grant]

Why do you have two IPs on the NIC? It is not required for VPN. VPN
automatically gives you a second IP which it links to the internal interface
to act as the server end of a VPN connection. You can forward tcp port 1723
to the normal LAN IP.

 

[Arnold]

When I originally tried this, I only had one IP address on the NIC and
had port 1723 forwarded to the IP of that NIC. When it didn't work
(same problem), I went back to the working server and saw that it had
two IP addresses on the same NIC and 1723 was forwarded to that second
address. Figured that's what I had to do.

 

[Bill Grant]

Try making a VPN connection from a machine on the local LAN (using the
server's LAN IP). If that works, your server setup is OK. (The problem is
probably in the router/firewall). If it doesn't work, at least you can debug
the problem locally.

 

[Arnold]

I didn't think a VPN connection from the local network would work, so
I never tried that. Tried it last night. Worked fine. Turns out my
router is a piece of crap as far as VPN is concerned. Can't replace
it, since it's my Vonage router, so I'll live with the fact that it
can be done, just not with my current setup.

Thanks for the info.

Arnold...