VPN and Windows Firewall

[andresms5]

I have 2 computers both running windows home. One is on my office and
the other is at home, behind a router. Both machines run Windows
Firewall.

I also setup a VPN connection between them. The one on my office being
the server and my laptop at home as the client. I followed Windows
Wizards in Add a new connection in both of them to setup the connection
without doing anything special.

I can get it to work if I disable any of the two windows firewalls.
This is a especially strange at the client side, as the firewall should
have nothing to do there.

The error I'm getting is Error 721. The error message appears after I
wait for like a minute in the dialog "Verifying Username and Password".

Thanks for any help.

 

[Guest]

I have 2 computers both running windows home. One is on my office and
the other is at home, behind a router. Both machines run Windows
Firewall.

I also setup a VPN connection between them. The one on my office being
the server and my laptop at home as the client. I followed Windows
Wizards in Add a new connection in both of them to setup the connection
without doing anything special.

I can get it to work if I disable any of the two windows firewalls.
This is a especially strange at the client side, as the firewall should
have nothing to do there.

The error I'm getting is Error 721. The error message appears after I
wait for like a minute in the dialog "Verifying Username and Password".

Thanks for any help.

Hi Andy,
First you should configure your Router to allow VPN network connecion and
allow traffics between your Laptop (client) and Desktop Offce (server).
Are you able to ping from the Laptop?.
Have a look at this article:
http://technet2.microsoft.com/Windo...61da-44fe-9633-4438d37e19021033.mspx?mfr=true
HTH.
Please let us know.
Regards,
nass

 

[andresms5]

Hi Andy,

First you should configure your Router to allow VPN network connecion and
allow traffics between your Laptop (client) and Desktop Offce (server).
Are you able to ping from the Laptop?.
Have a look at this article:
http://technet2.microsoft.com/Windo...61da-44fe-9633-4438d37e19021033.mspx?mfr=true
HTH.
Please let us know.
Regards,
nass

Nass, thank you for your reply.

My router has VPN traffic enabled (both PPTP and L2TP). I don't think
it has anything to do with it, as I can get the connection to work by
just disabling any of the two windows firewalls and leaving the router
alone.

I am able to ping from the laptop. In fact, I run various services in
my Desktop at the office (Cygwin/sshd, VNC, etc...) and they all work
great.

The article talks about the GRE protocol. I'm not sure if it is allow
through the Windows Firewall, but I don't know how to check, as it is a
network layer protocol.

 

[Sooner Al [MVP]]

You might make sure the XP SP2 Windows Firewall is configured to allow PPTP
VPN traffic through...

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvanced.JPG

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvancedServices.JPG

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallServiceSettings.JPG

When you forward TCP Port 1723 traffic through the XP SP2 Windows Firewall
GRE Protocol 47 traffic is automatically enabled. There is a test you can
run detailed in the "PPTP Ping" and "VPN Traffic" sections on this page that
may help pinpoint the problem.

http://www.microsoft.com/technet/community/columns/cableguy/cg0105.mspx

Also check the event viewer logs for possible clues...

http://www.microsoft.com/technet/support/ee/ee_advanced.aspx

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

 

[andresms5]

You might make sure the XP SP2 Windows Firewall is configured to allow PPTP
VPN traffic through...

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvanced.JPG

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvancedServices.JPG

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallServiceSettings.JPG

When you forward TCP Port 1723 traffic through the XP SP2 Windows Firewall
GRE Protocol 47 traffic is automatically enabled. There is a test you can
run detailed in the "PPTP Ping" and "VPN Traffic" sections on this page that
may help pinpoint the problem.

http://www.microsoft.com/technet/community/columns/cableguy/cg0105.mspx

Also check the event viewer logs for possible clues...

http://www.microsoft.com/technet/support/ee/ee_advanced.aspx

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

Thank you for your replies. It looks like it is working now with both
firewalls on. I don't understand why the solution works, but it solved
it. I had read similar posts telling me to enable the VPN Incoming
connections. What I didn't try was to edit this entrance as Sooner
pointed out in one of the links he sent. In my case, the entrance had
everything right, except it had the NETBIOS name of the computer insted
of the actual IP. I put the IP address in the field and it solved the
problem.

Thank you very much for all your help

Bye