Help: VPN from WinXP to w2k3 through external router, How do I do it?

Here's my setup:
I have a Windows XP workstation and W2K3 Server, both access the
internet through the router without problems and they can see each
other in network neighborhoods. My problem is that I cannot setup VPN
after I connected a router. Without the router, I had setup w3k3
server "Remote Access/VPN Server" and the VPN on the workstation
worked flawlessly. Now I get error 800 "Unable to connect to establish
the VPN connection". I have tried using the same IP address as before,
namely 196.168.0.1 shich didn't work, and I've also tried using the
router's gateway address as the IP for the VPN yo connect to. That
didn't work either. I think I'm in over my head. Can someone help?
Thanks in advance,
Ed

Hello,

Do you forward the correct ports from the router to the correct machine?

But i'm not sure what you really do. From where do you connect (Internet or
local LAN), and to where do you connect (is the VPN server on your local
LAN, and that is what you want to connect to from other locations, or do you
want to connect to another VPN server from your LAN)?

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


"Ed Spann" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Here's my setup:
> I have a Windows XP workstation and W2K3 Server, both access the
> internet through the router without problems and they can see each
> other in network neighborhoods. My problem is that I cannot setup VPN
> after I connected a router. Without the router, I had setup w3k3
> server "Remote Access/VPN Server" and the VPN on the workstation
> worked flawlessly. Now I get error 800 "Unable to connect to establish
> the VPN connection". I have tried using the same IP address as before,
> namely 196.168.0.1 shich didn't work, and I've also tried using the
> router's gateway address as the IP for the VPN yo connect to. That
> didn't work either. I think I'm in over my head. Can someone help?
> Thanks in advance,
> Ed

Thanks Kristofer,
I finally got past the error 800, unable to connect. I REMOVED the
"Remote Access/VPN Server" role from w2k3 Server, then re-installed
it. But now when connecting, it starts to register my computer on the
network, but then error #733, which says that the right protocols
could not be negotiated. I've got EAP setup on the w2k3 server, and
I'm using the "require secure password" option on the VPN connection
on the WinXP machine. What else should I be doing?
I've highlighted your specific questions to me below...
Ed

On Mon, 24 May 2004 09:59:31 +0200, "Kristofer Gafvert"
<(E-Mail Removed)> wrote:

>Hello,
>
>Do you forward the correct ports from the router to the correct machine?
>
>But i'm not sure what you really do. From where do you connect (Internet or
>local LAN),
I'm connected from a local LAN

>and to where do you connect (is the VPN server on your local
>LAN,
Yes

>and that is what you want to connect to from other locations, or do you
>want to connect to another VPN server from your LAN)?
No, I want to be able to connect to the VPN Server from the local LAN,
for now, but after that, I want to enable a VPN connection from the
Internet.

>>Here's my setup:
>>I have a Windows XP workstation and W2K3 Server, both access the
>>internet through the router without problems and they can see each
>>other in network neighborhoods. My problem is that I cannot setup VPN
>>after I connected a router. Without the router, I had setup w3k3
>>server "Remote Access/VPN Server" and the VPN on the workstation
>>worked flawlessly. Now I get error 800 "Unable to connect to establish
>>the VPN connection". I have tried using the same IP address as before,
>>namely 196.168.0.1 shich didn't work, and I've also tried using the
>>router's gateway address as the IP for the VPN yo connect to. That
>>didn't work either. I think I'm in over my head. Can someone help?
>>Thanks in advance,
>>Ed

Make sure that you have at least one common network protocol in both
the server and the client protocol settings...

Jeffrey Randow (Windows Networking & Smart Display MVP)
jeffreyr-(E-Mail Removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

On Tue, 25 May 2004 12:04:34 -0500, Ed Spann
<(E-Mail Removed)> wrote:

>Thanks Kristofer,
>I finally got past the error 800, unable to connect. I REMOVED the
>"Remote Access/VPN Server" role from w2k3 Server, then re-installed
>it. But now when connecting, it starts to register my computer on the
>network, but then error #733, which says that the right protocols
>could not be negotiated. I've got EAP setup on the w2k3 server, and
>I'm using the "require secure password" option on the VPN connection
>on the WinXP machine. What else should I be doing?
>I've highlighted your specific questions to me below...
>Ed
>
>On Mon, 24 May 2004 09:59:31 +0200, "Kristofer Gafvert"
><(E-Mail Removed)> wrote:
>
>>Hello,
>>
>>Do you forward the correct ports from the router to the correct machine?
>>
>>But i'm not sure what you really do. From where do you connect (Internet or
>>local LAN),
>I'm connected from a local LAN
>
>>and to where do you connect (is the VPN server on your local
>>LAN,
>Yes
>
>>and that is what you want to connect to from other locations, or do you
>>want to connect to another VPN server from your LAN)?
>No, I want to be able to connect to the VPN Server from the local LAN,
>for now, but after that, I want to enable a VPN connection from the
>Internet.
>
>>>Here's my setup:
>>>I have a Windows XP workstation and W2K3 Server, both access the
>>>internet through the router without problems and they can see each
>>>other in network neighborhoods. My problem is that I cannot setup VPN
>>>after I connected a router. Without the router, I had setup w3k3
>>>server "Remote Access/VPN Server" and the VPN on the workstation
>>>worked flawlessly. Now I get error 800 "Unable to connect to establish
>>>the VPN connection". I have tried using the same IP address as before,
>>>namely 196.168.0.1 shich didn't work, and I've also tried using the
>>>router's gateway address as the IP for the VPN yo connect to. That
>>>didn't work either. I think I'm in over my head. Can someone help?
>>>Thanks in advance,
>>>Ed