Can't VPN using Netgear DG834G

Hi,

I'm trying to connect to my business network from home using a Zen
ADSL line with a Netgear DG834G wireless router/firewall.

I've set up a VPN connection and can login OK with a user name and
password. Using ipconfig I can see that I've been allocated an IP
address within my business network but I can't pick up email or telnet
onto any servers.

I believe that the Netgear router is blocking the return traffic, how
do I configure it to allow this VPN connection?

My WinXP SP2 firewall is switched on, but switching it off makes no
difference.

Many thanks,
Pete.

im not too sure on VPNs but what if you create a rule on the netgear
firewall to allow all incoming traffic to your IP address or create a DMZ
and then you know whether it is your firewall blocking the return requests

Just a thought

Im sure someone has a better answer but thats what i would do



"Peter Harding" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> Hi,
>
> I'm trying to connect to my business network from home using a Zen
> ADSL line with a Netgear DG834G wireless router/firewall.
>
> I've set up a VPN connection and can login OK with a user name and
> password. Using ipconfig I can see that I've been allocated an IP
> address within my business network but I can't pick up email or telnet
> onto any servers.
>
> I believe that the Netgear router is blocking the return traffic, how
> do I configure it to allow this VPN connection?
>
> My WinXP SP2 firewall is switched on, but switching it off makes no
> difference.
>
> Many thanks,
> Pete.

On 4 Nov 2004 08:48:15 -0800, (E-Mail Removed) (Peter Harding)
wrote:

>Hi,
>
>I'm trying to connect to my business network from home using a Zen
>ADSL line with a Netgear DG834G wireless router/firewall.
>
>I've set up a VPN connection and can login OK with a user name and
>password. Using ipconfig I can see that I've been allocated an IP
>address within my business network but I can't pick up email or telnet
>onto any servers.
>
>I believe that the Netgear router is blocking the return traffic, how
>do I configure it to allow this VPN connection?
>
>My WinXP SP2 firewall is switched on, but switching it off makes no
>difference.
>
>Many thanks,
>Pete.

Try a smaller MTU.

Used to have this problem at the last place I worked. The tunnel
would establish, etc., but data wouldn't flow. Turned out that the
MTU plus the tunnel protocol overheads = fragmented packets, and the
firewall was dropping them.

I can't remember the exact details though, and can't suggest an MTU
size.

Jake

"Jake P" <jake@!!!nospam!!!.jake.org.uk> wrote in message
news:(E-Mail Removed)...
> On 4 Nov 2004 08:48:15 -0800, (E-Mail Removed) (Peter Harding)
> wrote:
>
> >Hi,
> >
> >I'm trying to connect to my business network from home using a Zen
> >ADSL line with a Netgear DG834G wireless router/firewall.
> >
> >I've set up a VPN connection and can login OK with a user name and
> >password. Using ipconfig I can see that I've been allocated an IP
> >address within my business network but I can't pick up email or telnet
> >onto any servers.
> >
> >I believe that the Netgear router is blocking the return traffic, how
> >do I configure it to allow this VPN connection?
> >
> >My WinXP SP2 firewall is switched on, but switching it off makes no
> >difference.
> >
> >Many thanks,
> >Pete.
>
> Try a smaller MTU.
>
> Used to have this problem at the last place I worked. The tunnel
> would establish, etc., but data wouldn't flow. Turned out that the
> MTU plus the tunnel protocol overheads = fragmented packets, and the
> firewall was dropping them.
>
> I can't remember the exact details though, and can't suggest an MTU
> size.
>
> Jake
>

Do you have another VPN running on another PC? I could not get 2 VPN
sessions running, apparantly a fault with the 834G in general

On Thu, 4 Nov 2004 19:28:03 -0000, "Mike R"
<(E-Mail Removed)> wrote:

>
>"Jake P" <jake@!!!nospam!!!.jake.org.uk> wrote in message
>news:(E-Mail Removed).. .
>> On 4 Nov 2004 08:48:15 -0800, (E-Mail Removed) (Peter Harding)
>> wrote:
>>
>> >Hi,
>> >
>> >I'm trying to connect to my business network from home using a Zen
>> >ADSL line with a Netgear DG834G wireless router/firewall.
>> >
>> >I've set up a VPN connection and can login OK with a user name and
>> >password. Using ipconfig I can see that I've been allocated an IP
>> >address within my business network but I can't pick up email or telnet
>> >onto any servers.
>> >
>> >I believe that the Netgear router is blocking the return traffic, how
>> >do I configure it to allow this VPN connection?
>> >
>> >My WinXP SP2 firewall is switched on, but switching it off makes no
>> >difference.
>> >
>> >Many thanks,
>> >Pete.
>>
>> Try a smaller MTU.
>>
>> Used to have this problem at the last place I worked. The tunnel
>> would establish, etc., but data wouldn't flow. Turned out that the
>> MTU plus the tunnel protocol overheads = fragmented packets, and the
>> firewall was dropping them.
>>
>> I can't remember the exact details though, and can't suggest an MTU
>> size.
>>
>> Jake
>>
>
>Do you have another VPN running on another PC? I could not get 2 VPN
>sessions running, apparantly a fault with the 834G in general
>

If the remote end assigned the IP details via DHCP then that proves
the tunnel's been established successfully, so I doubt it would be
that.

I was under the impression that the 834s only support single VPN
tunnel passthrough. If you need more than one session or more than
one tunnel then you need a hardware gateway, such as an FVL328.

Jake

"Peter Harding" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> Hi,
>
> I'm trying to connect to my business network from home using a Zen
> ADSL line with a Netgear DG834G wireless router/firewall.
>
> I've set up a VPN connection and can login OK with a user name and
> password. Using ipconfig I can see that I've been allocated an IP
> address within my business network but I can't pick up email or telnet
> onto any servers.
>
> I believe that the Netgear router is blocking the return traffic, how
> do I configure it to allow this VPN connection?
>
> My WinXP SP2 firewall is switched on, but switching it off makes no
> difference.
>
> Many thanks,
> Pete.

DNS maybe? does other users work ok when they VPN in? are you using IPsec or
PPTP? I find PPTP much easier to setup and use.

Can you ping a server on your network, try pinging the actuall hostname of
your exchange server, ie ping server01, if you get a reply you know all is
ok, if you only get a reply when you ping the servers internal ip
address<10.0.0.x etc> then you know its a dns issue and the DHCP may not be
assigning the right config.

There is known problem with VPN and XP and it involves DUN but I cant for
the life of me remember what it is, I will try and remember it

Ronny

On 4 Nov 2004 08:48:15 -0800, (E-Mail Removed) (Peter Harding)
wrote:

>Hi,
>
>I'm trying to connect to my business network from home using a Zen
>ADSL line with a Netgear DG834G wireless router/firewall.
>
>I've set up a VPN connection and can login OK with a user name and
>password. Using ipconfig I can see that I've been allocated an IP
>address within my business network but I can't pick up email or telnet
>onto any servers.
>
>I believe that the Netgear router is blocking the return traffic, how
>do I configure it to allow this VPN connection?
>
>My WinXP SP2 firewall is switched on, but switching it off makes no
>difference.
>
>Many thanks,
>Pete.


Sorry not to be much help but I vpn to our company with a DG834G and
didn't have to change any settings at all. It just worked....


Filthy Rich
Music House

"Peter Harding" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> Hi,
>
> I'm trying to connect to my business network from home using a Zen
> ADSL line with a Netgear DG834G wireless router/firewall.
>
> I've set up a VPN connection and can login OK with a user name and
> password. Using ipconfig I can see that I've been allocated an IP
> address within my business network but I can't pick up email or telnet
> onto any servers.
>
> I believe that the Netgear router is blocking the return traffic, how
> do I configure it to allow this VPN connection?
>
> My WinXP SP2 firewall is switched on, but switching it off makes no
> difference.
>
> Many thanks,
> Pete.

Hi Pete,

SP2 has a known problem with VPN's. I use a VPN connection and a DG834G so I
don't believe that it is responsible for your problem.

have a look at....

http://support.microsoft.com/default...b;en-us;884020

Download the patch and install it.

Regards,
Rob.

"Jake P" <jake@!!!nospam!!!.jake.org.uk> wrote in message
news:(E-Mail Removed)...
> On Thu, 4 Nov 2004 19:28:03 -0000, "Mike R"
> <(E-Mail Removed)> wrote:
>
>>
>>"Jake P" <jake@!!!nospam!!!.jake.org.uk> wrote in message
>>news:(E-Mail Removed). ..
>>> On 4 Nov 2004 08:48:15 -0800, (E-Mail Removed) (Peter Harding)
>>> wrote:
>>>
>>> >Hi,
>>> >
>>> >I'm trying to connect to my business network from home using a Zen
>>> >ADSL line with a Netgear DG834G wireless router/firewall.
>>> >
>>> >I've set up a VPN connection and can login OK with a user name and
>>> >password. Using ipconfig I can see that I've been allocated an IP
>>> >address within my business network but I can't pick up email or telnet
>>> >onto any servers.
>>> >
>>> >I believe that the Netgear router is blocking the return traffic, how
>>> >do I configure it to allow this VPN connection?
>>> >
>>> >My WinXP SP2 firewall is switched on, but switching it off makes no
>>> >difference.
>>> >
>>> >Many thanks,
>>> >Pete.
>>>
>>> Try a smaller MTU.
>>>
>>> Used to have this problem at the last place I worked. The tunnel
>>> would establish, etc., but data wouldn't flow. Turned out that the
>>> MTU plus the tunnel protocol overheads = fragmented packets, and the
>>> firewall was dropping them.
>>>
>>> I can't remember the exact details though, and can't suggest an MTU
>>> size.
>>>
>>> Jake
>>>
>>
>>Do you have another VPN running on another PC? I could not get 2 VPN
>>sessions running, apparantly a fault with the 834G in general
>>
>
> If the remote end assigned the IP details via DHCP then that proves
> the tunnel's been established successfully, so I doubt it would be
> that.
>
> I was under the impression that the 834s only support single VPN
> tunnel passthrough. If you need more than one session or more than
> one tunnel then you need a hardware gateway, such as an FVL328.
>
> Jake
>
>
>

It more likely to be my misunderstanding of the problem - sorry