VPN problem with DLink DI-624

[JL]

I recently bought a DLink DI-624 router. Everything is setup fine
except I can't connect to my company through VPN. I have basically
turned on DMZ, but I still was not able to connect through. The error
I'm getting is 'error 619: The specified port is not connected'. If I
connect to my cable modem directly without the router, I can VPN
without a problem. I have called DLink support, they have me tried all
kinds of things, but still no success. Anybody has any ideas that can
help me out would be greatly appreciated.

 

[Billy Madison]

Does your DLink router support the vpn tunneling protocols
used by your company?

 

[JL]

My company uses standard microsoft stuff. PPTP:1723. The router does support that.

 

[Billy Madison]

Try opening a TCP port 1723 and the IP protocol 47 (GRE).
I don't know what else to say if this doesn't work. Maybe
get a router that supports PPTP, L2TP, & IPSEC.

 

[Guru!?!]

Use the Web Administation page for your D-Link.

1. Tools
2. Misc.
3. Enable either IPSEC or PPTP under VPN Pass-Through.
4. Apply

That is it.
-G

 

[Nic]

I have the same problem, I tried to set the PPTP option to "enable"
but when I apply the change I get an error message that says "Day, is
wrong"
The system date and time are correct and I am not able to find any
other Day value.

Any ideas?
NB

 

[erik hanson]

I don't know what VPN client you are using but I had the same problem
with CheckPoint SecureRemote client and finally made some headway. I
think the problem is the encrypted TCP traffic. Most of the
authentication takes place over UDP which gets opened up when you
check "allow VPN pass-through".

CP SecureRemote uses IKE encryption over TCP. I found a setting in my
client software to not send IKE over TCP. Tried to connect to the
office, and it worked. I don't think this affects the encryption
scheme, it simply ignores certain outgoing encrypted TCP header
packets and sends only encrypted UDP.

If your client software uses IKE and you can find some related setting
try it. This is one of many (hundred?!) things I tried, all others
were unsuccessful.

Good luck!