VPN Connection to WinXP Pro behind NAT

[Guest]

We're getting an error 628 when attempting to connect.

We're configured the WinXP server using the network connection wizard. The
incoming TCP/IP properties are set to specify TCP/IP addresses that are
outside the range of those assigned by the router. The 'Allow calling
computer to specify....' is also checked.

On the router(Linksys WRT54G), TCP ports 50,51,1723, and UDP 50,51,500 have
been forwarded to the server. The 'Block Anonymous Internet Requests' has
been turned off, the VPN passthrough for IPSec,PPTP and L2TP are all enabled.

The WinXP documentation is very light....so at this point I'm lost.

Thanks for any help!
Derek

 

[Robert L [MS-MVP]]

I beleive we had a similar case posted in this group last week. I would upgrade the router firmware first.

VPN error code
Receiving VPN error 619 while connecting to a VPN via SBC ... VPN Error 628 -
The port is disconnected · VPN Error 629 - The port was disconnected by the ...
www.chicagotech.net/vpnerrors.htm

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
We're getting an error 628 when attempting to connect.

We're configured the WinXP server using the network connection wizard. The
incoming TCP/IP properties are set to specify TCP/IP addresses that are
outside the range of those assigned by the router. The 'Allow calling
computer to specify....' is also checked.

On the router(Linksys WRT54G), TCP ports 50,51,1723, and UDP 50,51,500 have
been forwarded to the server. The 'Block Anonymous Internet Requests' has
been turned off, the VPN passthrough for IPSec,PPTP and L2TP are all enabled.

The WinXP documentation is very light....so at this point I'm lost.

Thanks for any help!
Derek

 

[aspi]

my solution...

i've had the same trouble behind software nat/firewall. error 628. my solution was simple - at first, i only allowed incoming connections on tcp port 1723 and incoming request for protocol 47 (gre).

i couldn't find a way to make it work - but the problem was as simple as i didn't expect it to be - it needed to allow also outgoing connections.

thought all outgoing connections are allowed by default. however - they weren't.

so this is my clue.. not only allow the incoming, but also take care of the outgoing ones... )

good luck!