XP PPTP VPN Error 721

Discussion in 'Windows XP Work Remotely' started by Bob, Mar 30, 2004.

  1. Bob

    Bob Guest

    We are at the point where we attempt to complete the connection. but
    it gets stuck on Error 721.

    What is causing that?


    --

    Map Of The Vast Right Wing Conspiracy:
    http://www.freewebs.com/vrwc/

    You know you are in Hell when you have to make a
    distinction between what is moral and what is legal.
     
    Bob, Mar 30, 2004
    #1
    1. Advertisements

  2. Make sure that all routers and firewalls are configured to pass TCP port
    1723 and IP Protocol 47 (GRE).

    --

    Thanks,
    Marc Reynolds
    Microsoft Technical Support

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Marc Reynolds [MSFT], Mar 30, 2004
    #2
    1. Advertisements

  3. Bob

    Bob Guest

    That has been done.

    I sit at my desk at home and attempt to connect as the VPN Client. My
    partner sits at his office where the VPN Server is, and we watch the
    packets come in.

    The connection progresses to the point where I get the message about
    "Verifying username and password". Then after a while I get Error 721.

    I am logged into my machine as the "vpnclient". The VPN Server has a
    User named "vpnclient" and has extended permission to that user to
    connect on the VPN.

    I have done this PPTP thing several times before so I believe we have
    everything set up correctly. I just wish Windows would give better
    diagnostics so I would not have to chase phantoms.

    What is the most common cause of this problem?

    --

    Map Of The Vast Right Wing Conspiracy:
    http://www.freewebs.com/vrwc/

    You know you are in Hell when you have to make a
    distinction between what is moral and what is legal.
     
    Bob, Mar 30, 2004
    #3
  4. Bill Sanderson, Mar 30, 2004
    #4
  5. Bob

    Bob Guest

    I assume, based on past experience, that there is no router or
    firewall issue with the VPN Client. The only router/firewall problems
    are on the Server side of the connection. Just to make absolutely
    sure, I put the Client in the DMZ - and it made no difference.

    The router is a brand new Netopia 3546 Cayman DSL router installed by
    SBC (Southwestern Bell) as part of their DSL service. We asked Netopia
    tech support to Telnet into it and check our configuration. We had
    forwarded port 1723 to static IP address 192.168.1.100 on the LAN,
    which is the VPN Server. We also enabled PPTP Passthru in the router.
    In addition we restricted the LAN DHCP in the router to an address
    range 192.168.1.1 - 192.168.1.50. That way no one would be able to
    take 192.168.1.100 in case the VPN Server machine was offline. Netopia
    tech support took a look at all this and said everything was set up
    correctly for PPTP VPN Passthru.

    Earlier we were getting Error 678, the "No Connection" error. The man
    at the office looked in the process tableon the VPN Server and
    discovered that, although we had exited a firewall program, something
    associated with it was still running. He killed that process and then
    we were able to make some headway.

    Now I, at another location running the VPN Client, was able to get
    beyond Error 678 and begin to "Verify username and password". But it
    would terminate there with Error 721.

    I removed the password from the VPN Client connection dialog to see if
    it was the username or the password that was causing the problem.
    Everything was the same as before, so I assume that the VPN Server is
    not able to verify the username and never gets to the password.
    The VPN Server I set up for test purposes the other day was on Win2K.
    The VPN Client was XP. Now the situation is reversed in terms of
    operating system versions. Also, the other machine is a different
    machine in a different environment.

    Why would the VPN Server not be able to verify the VPN Client
    username?

    Is this a matter of another firewall blocking the process of username
    verification or is this an XP VPN configuration issue?

    Or does the fact that we are making it to verification rule out any
    blocking from a firewall?


    --

    Map Of The Vast Right Wing Conspiracy:
    http://www.freewebs.com/vrwc/

    You know you are in Hell when you have to make a
    distinction between what is moral and what is legal.
     
    Bob, Mar 30, 2004
    #5
  6. Bob

    Bob Guest

    Since I last posted here, I believe I may have stumbled onto something
    I need to ask everyone.

    When I set up my Win2K machine at my home, I used the default
    Workgroup called "WORKGROUP" for the peer-to-peer network. The
    Workgroup for the VPN Server at the business office is an XP machine
    which was set up with a different Workgroup name. I do not know that
    name at the moment - but I will soon.

    Does that make any difference in "Verifying username and password"?

    If so, I will have to change the Workgroup for my machine - how do I
    go about doing that?

    This should not be an issue because the other day when I set up the
    VPN Server on my machine, my associate was able to connect from his
    home using an XP machine with a different Workgroup name. But I wanted
    to run this by everyone just in case.


    --

    Map Of The Vast Right Wing Conspiracy:
    http://www.freewebs.com/vrwc/

    You know you are in Hell when you have to make a
    distinction between what is moral and what is legal.
     
    Bob, Mar 30, 2004
    #6
  7. Have you changed firmware releases or upgraded the software on your
    firewall/gateway device? This sounds like the PPTP Passthrough / GRE/
    IP 47 is not enabled....

    Jeffrey Randow (Windows Net. & Smart Display MVP)


    Please post all responses to the newsgroups for the benefit
    of all USENET users. Messages sent via email may or may not
    be answered depending on time availability....

    Remote Networking Technology Support Site -
    http://www.remotenetworktechnology.com
    Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone
     
    Jeffrey Randow (MVP), Apr 1, 2004
    #7
  8. Bob

    gallai Guest

    Guys
    I think I found the solution!
    I've been struggling with the same problem, until I realized I didn'
    pay attention to the details.
    When you configure your router to map your VPN ports, don't use th
    private IP assigned to your server's network card. Instead, ru
    IPCONFIG on your server, and you'll see that Windows aquired a
    ADDITIONAL IP ADDRESS (called RAS....something) from your DHCP. Us
    this IP in your router config and everything will be smooth.

    Gre


    -
    galla
     
    gallai, Nov 25, 2004
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.