Some help with VPN (PPTP) trouble shooting - please

Hi,

I'm sure this is a very regular question, but this is my first time round ....

My server has 2 network cards, the external one 192.168... and an internal
one I've allocated 10.0.0.1 (for a ethernet based VPN connection)

The ras config shows the external one has nat and firewall selected and the
other one is set to private and internal network.

I have an allow acccess policy from the vpn/ethernet.

A lan based xp vpn client connection targeted at 10.0.0.1 gets nowhere. An
ethereal trace from the xp client just shows a tcp connection request, but
nothing ever comes back.

All the interfaces are actually conected to the same hub, and I can ping the
eternal interface from the xp box, but not the vpn (as expected). I have
enabled lras event logging.

Basically it fails but I get no logging or errors.

What is the best way to unpick what is going wrong (not set up ?)

Thanks very much

nick

Since you have NAT enabled, check if VPN Gate (PPTP) is checked. Also check the Inbound Filters.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Nick Farrow" <(E-Mail Removed)> wrote in message news:4AE2A03E-7E63-42FF-869F-(E-Mail Removed)...
Hi,

I'm sure this is a very regular question, but this is my first time round ....

My server has 2 network cards, the external one 192.168... and an internal
one I've allocated 10.0.0.1 (for a ethernet based VPN connection)

The ras config shows the external one has nat and firewall selected and the
other one is set to private and internal network.

I have an allow acccess policy from the vpn/ethernet.

A lan based xp vpn client connection targeted at 10.0.0.1 gets nowhere. An
ethereal trace from the xp client just shows a tcp connection request, but
nothing ever comes back.

All the interfaces are actually conected to the same hub, and I can ping the
eternal interface from the xp box, but not the vpn (as expected). I have
enabled lras event logging.

Basically it fails but I get no logging or errors.

What is the best way to unpick what is going wrong (not set up ?)

Thanks very much

nick

It is not at all clear from this description what you are trying to do.
Why does the server have two NICs? If you installed a second NIC just to
allow the machine to be a VPN server you wasted your time. VPN clients
connect to a "virtual" internal interface, not a NIC.

It appears you are trying to make a VPN connection over a LAN ethernet
connection. If so, all you need to do is enable the server (with only one
NIC) for remote access. The client contacts the server on this LAN IP and
negotiates a VPN connection. The client and the server get a second IP
address from RRAS. These can be in the same IP subnet as the LAN uses or in
a different subnet, depending on how you configure RRAS.

If this is not your aim, where is the VPN client located?

Nick Farrow wrote:
> Hi,
>
> I'm sure this is a very regular question, but this is my first time
> round ....
>
> My server has 2 network cards, the external one 192.168... and an
> internal one I've allocated 10.0.0.1 (for a ethernet based VPN
> connection)
>
> The ras config shows the external one has nat and firewall selected
> and the other one is set to private and internal network.
>
> I have an allow acccess policy from the vpn/ethernet.
>
> A lan based xp vpn client connection targeted at 10.0.0.1 gets
> nowhere. An ethereal trace from the xp client just shows a tcp
> connection request, but nothing ever comes back.
>
> All the interfaces are actually conected to the same hub, and I can
> ping the eternal interface from the xp box, but not the vpn (as
> expected). I have enabled lras event logging.
>
> Basically it fails but I get no logging or errors.
>
> What is the best way to unpick what is going wrong (not set up ?)
>
> Thanks very much
>
> nick