Windows 2003 Server RAS VPN setup behind firewall.

[Guest]

I have a 2003 Standard Ed. server setup behind a sonicwall 3060 firewall. It
is a domain controller and a RAS server and that is it.

I have setup RAS for VPN access via L2TP and it works if I connect from
inside the network. I get authenticated and it drops down to the tray.

My issue is that from the outside where I acutally need to use it I can't
get it to connect to the server at all. It will just sit and spin until it
times out. I can connect if I open PPTP and enable it on the RAS server, but
not L2TP.

I have all the patches for NAT traversal and whatnot done on my client
machines and to top it off I have another setup close to this one working
just fine from the same client machines. The only difference is an older
firewall.

When it finally times out I get the 792 error about security negotiations
timing out. I have ports 4500 and 500 UDP forwarded to the server on the
inside. I also have 1701 forwarded and IPSEC (ESP) forwarded as well. This is
all that is forwarded on the other setup and all I can find that I need on
the net.

I have contacted Sonicwall and they don't seem to think it's their problem.
I might try a different firewall to make sure, I'm just trying to find out if
anyone has any other suggestions.

Thanks in advance,

Ashley Heaton

 

[BP]

Port 1723 pptp open on firewall?

 

[Guest]

Yes, I have it open on the firewall to verify that PPTP will work. I do not
want to use PPTP however, I need to use LT2P.

 

[BP]

Articles 233256, 231587 and 252735
rfc info on l2tp client connections may help.