VPN Enquires - Error 678: The remote computer did not respond

[DrivesMeCrazy]

Hi guys,

I need help on this VPN stuff.
I have already setup Win2K VPN server at my workplace and at my home I have
WinXP as the VPN client.
When I tried to connect from home to the office, i get the following
message: "Error 678: The remote computer did not respond."
Seems to me that the client setup is ok, and the problem lies with the
server side.

In the office, I have a VPN router but its not issuing any ip address, all
is done within Win2K DHCP server.
In addition, the ip addresses or the scope are all private ip addresses
which will be issued to VPN clients.
Is this right? or should i assign VPN client public ip addresses?
Do I need to do forward port 1723 on the router side? Is this necessary?
Since my RRAS is already configured to a public static IP, the client should
be able to connect to it right?

Details of my current setup is as follows:-

Win2K Server: IP address - static private IP
router - DLink DI-804V (static private IP)
RRAS(VPN): hostname - static public IP
DHCP - uses win2k server own dhcp (non-routable IPs)
Type of VPN - PPTP VPN
Firewall: None


WinXP client config: hostname of server - public IP address
- includes windows logon domain
Type of VPN - PPTP VPN

 

[Jack Seredyniecki]

Is your RRAS server outside the router?

 

[Brian Oakes [MSFT]]

Can you telnet to 1723 on your RRAS servers public nic? (You won't get
anything on the screen, but you will be put into a blank screen). If you are
able to connect, then you need to make sure you router is passing GRE 47. If
you can't get anything, make sure it passes TCP/1723

--

Best regards,
Brian Oakes, MCSE
Microsoft Product Support
Windows 2000 Server Networking Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit.

 

[DrivesMeCrazy]

Hi Brian,

I am rather confuse now with the VPN implementation in Win2K Server.
I have even searched, scanned and read through some of the docs on this
issue on the net.

Right now, my RRAS is configured on a static public IP address.
DHCP, WINS and DNS are also configure on the server(standalone) which also
runs RRAS.
This server is configured with a static private IP.
Thus, should my client(WinXP) connect to the server through the RRAS IP or
the WAN IP of my office network?

And what does this router forward port thing got to do with the VPN
implementation?
I have not done much configuration on the router at this point of time,
since i disable its DHCP service(done on Win2K).
I have only configured its WAN IP, and its device IP on the router.
Could somebody clear up my doubts?

Thanks in advance.

 

[Marina Roos]

How many nics in the server?

Marina

Hi Brian,

I am rather confuse now with the VPN implementation in Win2K Server.
I have even searched, scanned and read through some of the docs on this
issue on the net.

Right now, my RRAS is configured on a static public IP address.
DHCP, WINS and DNS are also configure on the server(standalone) which also
runs RRAS.
This server is configured with a static private IP.
Thus, should my client(WinXP) connect to the server through the RRAS IP or
the WAN IP of my office network?

And what does this router forward port thing got to do with the VPN
implementation?
I have not done much configuration on the router at this point of time,
since i disable its DHCP service(done on Win2K).
I have only configured its WAN IP, and its device IP on the router.
Could somebody clear up my doubts?

Thanks in advance.


47.

 

[DrivesMeCrazy]

I NIC only
WINS, DHCP, DNS, AD, DC and RRAS all in one server

 

[Brian Oakes [MSFT]]

This goes back to an earlier question.

Can you telnet to the wan ip address on 1723

eg

telnet wanip 1723

What do you get?

--

Best regards,
Brian Oakes, MCSE
Microsoft Product Support
Windows 2000 Server Networking Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit.

 

[DrivesMeCrazy]

Hi Brian,

everything is working fine now.
My VPN has been setup properly, I can now access internally or externally
provided I disactivate the firewall.

However, I am face with 2 new problems now.

1) The VPN client's browse list is not able to list the shared folders on
the VPN server.
I need to use the command "net use \\servername\sharedfolders", followed by
mapping the network drive in order to access the resource.
Is there anywhere I can enable the browse list to list all the shared
resources on the VPN client machine?

2) What are the port numbers i need to enable on my firewall or router? So
far, I have only enable port 1723 for PPTP.

In addition, the network throughput is still not ideal enough. Its still
slow even though both the side are on ADSL or Cable.
Any good network tool to recommend for analysing the throughput of the
network?

Thanks alot for the help.

 

[Wajihy [MSFT]]

to answer both questions:

normally you should be able to browse the shared folder once you get access
to the network, check the share folder settings if they are set correctly

for the second question if you are using PPTP you need port GRE 47 open as
well

if the network is slow you need to check with you cable company

 

[DrivesMeCrazy]

Recently, I have been hit by a couple of trojan, virus, etc.
My network screwed up at times even though i run my anti-virus.
I think thats probably one of the reason why the browse list screwed up(even
for machines on LAN).

Anyway, where do i enable this GRE 47?
I don't see any settings on my router or firewall on this protocol.

 

[Wajihy [MSFT]]

sorry I meant
IP Protocol 47 (GRE);

 

[DrivesMeCrazy]

yap, i know its IP protocol.... but where do i enable it?
someone pls