VPN Server Behind Router - cannot connect to it

[Cameron]

Hi all,

I have a XP Pro box on a network behind a linksys router. I have it setup
as a VPN server. I know that works because I can connect to it with any
computer on the network.

My IP is dynamic, so I have a program that updates it so I can use a static
name "myip.domain.org"

I want to connect to it at home. But I can't. I get an error. There has
been a variety of errors, 700, 629, 650 some others cannot remember.

I have heard about port forwarding, but I don't know if I am doing it right.
Obviously I am not, but here are my settings.
Forwarding Tab

Ext.Port 47 TCP & UDP x.x.x.103 enabled
Ext.Port 50-51 TCP & UDP x.x.x.103 enabled
Ext.Port 500 TCP & UDP x.x.x.103 enabled
Ext.Port 1723 TCP & UDP x.x.x.103 enabled

Port Triggering is blank
UPnP Forwarding has stuff but nothing for VPN

Everything else is the same as when we had it setup before the VPN.

My latest troubleshooting has been done on a network computer, using the IP
assigned by my ISP. It is on an 98SE box.

At home, I have XP Pro.

So, what am I missing?
Thanks
Cameron

 

[Yves Leclerc]

Have you tried to set up a DMZ port to access this VPN server?

 

[Marc Reynolds [MSFT]]

Here is a problem:

Ext.Port 47 TCP & UDP x.x.x.103 enabled

You don't need TCP and UDP port 47 open, instead you need to configure the
router to forward IP Protocol 47 (GRE). Some router also call this "PPTP
Pass through".

You won't need TCP 50-51, 500 and UDP 51 for any VPN and UDP 50 and 500 are
only used for L2TP.

In summary you only need TCP 1723 and IP Protocol 47 (GRE) for a PPTP VPN.



--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Cameron]

Thanks for the input.

Yves

I am a little reluctant to setup the DMZ. Am I still protected behind the
firewall? It says it will give the computer direct access to the internet.

Have you tried to set up a DMZ port to access this VPN server?

Marc

I am still confused with your response. I deleted all router entries and
just setup TCP 1723 and forwarded it to the XP Box. I didn't know what you
meant by IP Protocol 47 (GRE). I tried 47 TCP and/or UDP and forwarded it
to the XP Box, but either way it didn't work.

Prior to these changes, a messages appeared that says authorizing username
and password and then it disconnected, now I don't even get that far before
being disconnected.

 

[GwD]

Look for a check box that says PPTP.

Thanks for the input.

Yves

I am a little reluctant to setup the DMZ. Am I still protected behind the
firewall? It says it will give the computer direct access to the internet.


Marc

I am still confused with your response. I deleted all router entries and
just setup TCP 1723 and forwarded it to the XP Box. I didn't know what you
meant by IP Protocol 47 (GRE). I tried 47 TCP and/or UDP and forwarded it
to the XP Box, but either way it didn't work.

Prior to these changes, a messages appeared that says authorizing username
and password and then it disconnected, now I don't even get that far before
being disconnected.




VPN.

 

[Cameron]

This is the only thing I could find in the router setup. And it was already
enabled.

PPTP Pass Through: Enable

 

[GwD]

You are trying to connect from outside your router to
(yourrouter.address.103) Not the internal address 192.168.1.103 right?

 

[Cameron]

Correct.