Clients unable to connect via VPN

I have a frustrating problem. I have set up a W2K3 Ent Server in an AD
domain and now want to access resources via VPN from home. I have configured
RRAS on the server and allowed access to users in AD Users and Computers. I
try to set up the Vista Business (or Ultimate) clients to connect but
continue to get the error "MYSERVER is not set up to establish a connection
on port "pptp" with this computer."

The modem/router is a Netcomm NB5Plus4W which has VPN pass thru for both
PPTP and IPSEC. I have forwarded port 1723 to the internal IP address of the
RRAS server. Web and POP3 have also been forwarded and these work fine.

I have a duplicate system at home but with Std Server and have the same
problem.

Any suggestons appreciated

"Ecopoxy" <(E-Mail Removed)> wrote in message
news:052FAAFE-0144-4DF4-B10B-(E-Mail Removed)...
> I have a frustrating problem. I have set up a W2K3 Ent Server in an AD
> domain and now want to access resources via VPN from home. I have
> configured
> RRAS on the server and allowed access to users in AD Users and Computers.
> I
> try to set up the Vista Business (or Ultimate) clients to connect but
> continue to get the error "MYSERVER is not set up to establish a
> connection
> on port "pptp" with this computer."
>
> The modem/router is a Netcomm NB5Plus4W which has VPN pass thru for both
> PPTP and IPSEC. I have forwarded port 1723 to the internal IP address of
> the
> RRAS server. Web and POP3 have also been forwarded and these work fine.
>
> I have a duplicate system at home but with Std Server and have the same
> problem.
>
> Any suggestons appreciated

The first thing to do is check that your server is properly configured.
To do this try to make a VPN connection from a LAN machine on the same
network as the server. (VPN will work over a local IP connection). If you
can't connect, redo the RRAS setup.

If it works locally, the problem is with your router or (unlikely but
possible) your ISP. Some ISPs block GRE, which PPTP depends on. If it is a
GRE problem, you usually get an error 721.

Thanks for the quick response...

I have already tried connecting from the LAN and it also won't work. I have
also diisabled and then renstalled RRAS several times with no luck.

"Bill Grant" wrote:

>
>
> "Ecopoxy" <(E-Mail Removed)> wrote in message
> news:052FAAFE-0144-4DF4-B10B-(E-Mail Removed)...
> > I have a frustrating problem. I have set up a W2K3 Ent Server in an AD
> > domain and now want to access resources via VPN from home. I have
> > configured
> > RRAS on the server and allowed access to users in AD Users and Computers.
> > I
> > try to set up the Vista Business (or Ultimate) clients to connect but
> > continue to get the error "MYSERVER is not set up to establish a
> > connection
> > on port "pptp" with this computer."
> >
> > The modem/router is a Netcomm NB5Plus4W which has VPN pass thru for both
> > PPTP and IPSEC. I have forwarded port 1723 to the internal IP address of
> > the
> > RRAS server. Web and POP3 have also been forwarded and these work fine.
> >
> > I have a duplicate system at home but with Std Server and have the same
> > problem.
> >
> > Any suggestons appreciated
>
> The first thing to do is check that your server is properly configured.
> To do this try to make a VPN connection from a LAN machine on the same
> network as the server. (VPN will work over a local IP connection). If you
> can't connect, redo the RRAS setup.
>
> If it works locally, the problem is with your router or (unlikely but
> possible) your ISP. Some ISPs block GRE, which PPTP depends on. If it is a
> GRE problem, you usually get an error 721.
>
>
>

Just created a new VPN connection from the 192.168.x.y network and it
connects OK. GRE protocol is enabled on the moden/router. I have tried
forwarding to both NIC's (one at a time) still with no luck...

"Ecopoxy" wrote:

> Thanks for the quick response...
>
> I have already tried connecting from the LAN and it also won't work. I have
> also diisabled and then renstalled RRAS several times with no luck.
>
> "Bill Grant" wrote:
>
> >
> >
> > "Ecopoxy" <(E-Mail Removed)> wrote in message
> > news:052FAAFE-0144-4DF4-B10B-(E-Mail Removed)...
> > > I have a frustrating problem. I have set up a W2K3 Ent Server in an AD
> > > domain and now want to access resources via VPN from home. I have
> > > configured
> > > RRAS on the server and allowed access to users in AD Users and Computers.
> > > I
> > > try to set up the Vista Business (or Ultimate) clients to connect but
> > > continue to get the error "MYSERVER is not set up to establish a
> > > connection
> > > on port "pptp" with this computer."
> > >
> > > The modem/router is a Netcomm NB5Plus4W which has VPN pass thru for both
> > > PPTP and IPSEC. I have forwarded port 1723 to the internal IP address of
> > > the
> > > RRAS server. Web and POP3 have also been forwarded and these work fine.
> > >
> > > I have a duplicate system at home but with Std Server and have the same
> > > problem.
> > >
> > > Any suggestons appreciated
> >
> > The first thing to do is check that your server is properly configured.
> > To do this try to make a VPN connection from a LAN machine on the same
> > network as the server. (VPN will work over a local IP connection). If you
> > can't connect, redo the RRAS setup.
> >
> > If it works locally, the problem is with your router or (unlikely but
> > possible) your ISP. Some ISPs block GRE, which PPTP depends on. If it is a
> > GRE problem, you usually get an error 721.
> >
> >
> >

"Ecopoxy" <(E-Mail Removed)> wrote in message
news:019BDDF7-2492-4FEF-B51D-(E-Mail Removed)...
> Just created a new VPN connection from the 192.168.x.y network and it
> connects OK. GRE protocol is enabled on the moden/router. I have tried
> forwarding to both NIC's (one at a time) still with no luck...
>
That does worry me. Why does the VPN server have two NICs if it is behind
a router? You only need two NICs if you are directly connecting to the
public network. If you are behind a router, you should only have one NIC
active. Disable one NIC and run the RRAS configuration wizard again. Select
the last option (I think it is called custom config) and then select the VPN
box.

Sorry, I should have explained that better. One NIC is attached to the
router from the server, the second is attached to the switch on the lan side.
I have spoken to the ISP and they claim that they do not block 1723 or
GRE...that leaves the modem at the moment.

"Bill Grant" wrote:

>
>
> "Ecopoxy" <(E-Mail Removed)> wrote in message
> news:019BDDF7-2492-4FEF-B51D-(E-Mail Removed)...
> > Just created a new VPN connection from the 192.168.x.y network and it
> > connects OK. GRE protocol is enabled on the moden/router. I have tried
> > forwarding to both NIC's (one at a time) still with no luck...
> >
> That does worry me. Why does the VPN server have two NICs if it is behind
> a router? You only need two NICs if you are directly connecting to the
> public network. If you are behind a router, you should only have one NIC
> active. Disable one NIC and run the RRAS configuration wizard again. Select
> the last option (I think it is called custom config) and then select the VPN
> box.
>
>

The problem is here: "I have already tried connecting from the LAN and it
also won't work". Can you telnet port 1723 in the LAN. If not, please post
back the results of ipconfig /all on the server.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"Ecopoxy" <(E-Mail Removed)> wrote in message
news:BF8710AB-9F9B-45CE-B313-(E-Mail Removed)...
> Sorry, I should have explained that better. One NIC is attached to the
> router from the server, the second is attached to the switch on the lan
> side.
> I have spoken to the ISP and they claim that they do not block 1723 or
> GRE...that leaves the modem at the moment.
>
> "Bill Grant" wrote:
>
>>
>>
>> "Ecopoxy" <(E-Mail Removed)> wrote in message
>> news:019BDDF7-2492-4FEF-B51D-(E-Mail Removed)...
>> > Just created a new VPN connection from the 192.168.x.y network and it
>> > connects OK. GRE protocol is enabled on the moden/router. I have
>> > tried
>> > forwarding to both NIC's (one at a time) still with no luck...
>> >
>> That does worry me. Why does the VPN server have two NICs if it is
>> behind
>> a router? You only need two NICs if you are directly connecting to the
>> public network. If you are behind a router, you should only have one NIC
>> active. Disable one NIC and run the RRAS configuration wizard again.
>> Select
>> the last option (I think it is called custom config) and then select the
>> VPN
>> box.
>>
>>