VPN error 628

[Evan Child]

Hello,
I have a Windows XP Pro sitting behind a DSL gateway with NAT enabled.
I have enabled on my gateway PPTP/L2P passthrough, which I understand
is GRE 47. Additionally, I have forwarded port 1723 to the ip address
of the vpn server.
I also set the verify ip dword VerifyAddress in
HKEY_LOCAL_MACHINE\(blah)\Class\{...}\0000 to 0. The purpose of this,
as I understand it, is so that it doesn't try and verify the checksums
on the packet when it appears to be coming from a source different
from what the router says.
However, when I try to connect to it from outside the network, it
appears as though it is going to connect and then gives error 628:
"The connection was terminated by the remote computer before it could
be completed. For further assistance, click More Info....."

Also, I know the user I'm trying to authenticate as has admin
privileges.

Does anyone have any other ideas as to what more I need to do to
enable this?

Thanks,

Evan

 

[Jeffrey Randow (MVP)]

PPTP uses IP Protocol 47 GRE and TCP 1723.
L2TP uses IP Protocol 50 IPSEC and UDP 500 (and others, depending on
what L2TP/IPSEC server you are using).

Note that you need a hotfix to enable a L2TP VPN connection over a NAT
connection (as well as a server that supports L2TP NAT-Traversal).

Jeffrey Randow (Windows Net. & Smart Display MVP)
(e-mail address removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone