vpn server in windows xp pro

Hi,

I need to creat a VPN so a worker can acess my file server from a
outside location. Unfortanetely the file server is a wxp pro. I
allready configure the vpn server in that computer using the "new
connection" wizzard. Also configure the client using the same tool.

The thing is i'm getting an error800 in the client side, and no
connection is established. From my research the 800 is due to not
finding L2TP or PPTP server. (all this at the lan, just for testing
purpose, only a sw in the middle). I tryed with a diferent machine, but
also, xp pro as server and worked ok.

On the server side I found the following things:

1. system log (warning): a certificate could not be found. connections
that use the L2TP protocol over IPSEC require the instalation of a
machine certificate, also known as a computer certitcate. No L2TP calls
will be accepted. - error 20192

I searched for this error at MS site and it really says something about
the certificate. But I compare the server certifcates with another
machine it seems all ok. I tested with that other machine as server and
it worked fine. Is there any way to restore the defaults certs in wxp
pro?

2. system log (error): (translating) The RRAS depends on the
NETBIOSgroup and none of this members group as been initiated. - error
7002

Allready done some research but found nothing significant....

3. Trying to initiate the IPSEC service: (translating) error 1747 - the
authentication service is unknown.

Allready done some research but found nothing significant....
Everything I found were clues to confirm the service dependences.

Anyone as clue for this? I'm considering formating the "server"...

Two other things regarding this mather. I manage to have wxppro for
testing that work fine. The VPN tunnel is established but than 2 things
happen:

1. After more or less 1 minute both the server and the client stop the
ping -t.

2. The client machine loses its acess to internet.

Sorry for the long text. Hope somebody can give me a help.

Tks in advance.

Best regards,
zogerdr



zogerdr

"zogerdr" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> I need to creat a VPN so a worker can acess my file server from a
> outside location. Unfortanetely the file server is a wxp pro. I

From an outside location? If your machine is on a LAN behind a NAT device
it is not directly accessable from the outside.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

I've configured the passthrough in the router so it should word fine
right? That's not the problem...

Best resgards,
zogerdr

Whenever I have this problem, I start checking to see if the XP firewall (or
Norton/McAfee/etc.) is up. You either have to disable it or configure it to
allow the connection to access the authenticating server.

Almost always, taking down the firewall (or configuring it, if configurable)
gets past this problem. I have one system protected by a McAfee firewall
that is the exception to this rule, however. I'm still working on getting
this one to connect. ;^)

"zogerdr" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> Hi,
>
> I need to creat a VPN so a worker can acess my file server from a
> outside location. Unfortanetely the file server is a wxp pro. I
> allready configure the vpn server in that computer using the "new
> connection" wizzard. Also configure the client using the same tool.
>
> The thing is i'm getting an error800 in the client side, and no
> connection is established. From my research the 800 is due to not
> finding L2TP or PPTP server. (all this at the lan, just for testing
> purpose, only a sw in the middle). I tryed with a diferent machine, but
> also, xp pro as server and worked ok.
>
> On the server side I found the following things:
>
> 1. system log (warning): a certificate could not be found. connections
> that use the L2TP protocol over IPSEC require the instalation of a
> machine certificate, also known as a computer certitcate. No L2TP calls
> will be accepted. - error 20192
>
> I searched for this error at MS site and it really says something about
> the certificate. But I compare the server certifcates with another
> machine it seems all ok. I tested with that other machine as server and
> it worked fine. Is there any way to restore the defaults certs in wxp
> pro?
>
> 2. system log (error): (translating) The RRAS depends on the
> NETBIOSgroup and none of this members group as been initiated. - error
> 7002
>
> Allready done some research but found nothing significant....
>
> 3. Trying to initiate the IPSEC service: (translating) error 1747 - the
> authentication service is unknown.
>
> Allready done some research but found nothing significant....
> Everything I found were clues to confirm the service dependences.
>
> Anyone as clue for this? I'm considering formating the "server"...
>
> Two other things regarding this mather. I manage to have wxppro for
> testing that work fine. The VPN tunnel is established but than 2 things
> happen:
>
> 1. After more or less 1 minute both the server and the client stop the
> ping -t.
>
> 2. The client machine loses its acess to internet.
>
> Sorry for the long text. Hope somebody can give me a help.
>
> Tks in advance.
>
> Best regards,
> zogerdr
>

Ok. Well I thought there was some article for rigging up XP to accept
inbound PPTP connections,...but I don't know what it is called. So far I
have not been able to find it. I think it is kind of a "hack" since XP was
never meant to function that way, it was meant to connect to a PPTP Server,
not be one.

If I find the article later I will post it. Maybe someone else will already
know the location of it.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"zogerdr" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> I've configured the passthrough in the router so it should word fine
> right? That's not the problem...
>
> Best resgards,
> zogerdr
>

I have used PPTP on an XP Pro as VPN host as a test (using the new
connection wizard to configure an incoming connection). As Jim said, the XP
(or a third pary) firewall can be a pain.

There is practically nothing that you can change in the config. I have
no idea if you can use L2TP or how you would configure it.

Jim wrote:
> Whenever I have this problem, I start checking to see if the XP
> firewall (or Norton/McAfee/etc.) is up. You either have to disable
> it or configure it to allow the connection to access the
> authenticating server.
> Almost always, taking down the firewall (or configuring it, if
> configurable) gets past this problem. I have one system protected by
> a McAfee firewall that is the exception to this rule, however. I'm
> still working on getting this one to connect. ;^)
>
> "zogerdr" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) oups.com...
>> Hi,
>>
>> I need to creat a VPN so a worker can acess my file server from a
>> outside location. Unfortanetely the file server is a wxp pro. I
>> allready configure the vpn server in that computer using the "new
>> connection" wizzard. Also configure the client using the same tool.
>>
>> The thing is i'm getting an error800 in the client side, and no
>> connection is established. From my research the 800 is due to not
>> finding L2TP or PPTP server. (all this at the lan, just for testing
>> purpose, only a sw in the middle). I tryed with a diferent machine,
>> but also, xp pro as server and worked ok.
>>
>> On the server side I found the following things:
>>
>> 1. system log (warning): a certificate could not be found.
>> connections that use the L2TP protocol over IPSEC require the
>> instalation of a machine certificate, also known as a computer
>> certitcate. No L2TP calls will be accepted. - error 20192
>>
>> I searched for this error at MS site and it really says something
>> about the certificate. But I compare the server certifcates with
>> another machine it seems all ok. I tested with that other machine as
>> server and it worked fine. Is there any way to restore the defaults
>> certs in wxp pro?
>>
>> 2. system log (error): (translating) The RRAS depends on the
>> NETBIOSgroup and none of this members group as been initiated. -
>> error 7002
>>
>> Allready done some research but found nothing significant....
>>
>> 3. Trying to initiate the IPSEC service: (translating) error 1747 -
>> the authentication service is unknown.
>>
>> Allready done some research but found nothing significant....
>> Everything I found were clues to confirm the service dependences.
>>
>> Anyone as clue for this? I'm considering formating the "server"...
>>
>> Two other things regarding this mather. I manage to have wxppro for
>> testing that work fine. The VPN tunnel is established but than 2
>> things happen:
>>
>> 1. After more or less 1 minute both the server and the client stop
>> the ping -t.
>>
>> 2. The client machine loses its acess to internet.
>>
>> Sorry for the long text. Hope somebody can give me a help.
>>
>> Tks in advance.
>>
>> Best regards,
>> zogerdr

Hi there,

"So far I have not been able to find it. I think it is kind of a
"hack" since XP was
never meant to function that way, it was meant to connect to a PPTP
Server,
not be one. "

It's not any kind of hack as you can see:
http://www.onecomputerguy.com/networ...vpn_server.htm

My WxpPro firewall (wxppro) is well configured as I opened the right
ports for the vpn. I tryed in a diferent xp and it worked fine. Despite
this I also tryed to connect with firewall turned off and got the same
result.

I believed this was something to do with some kind of OS malfunction so
I decided to reinstall the machine. This eliminates the first part of
my problems. I've also read that disabling the "default gateway" in the
client and configuring the route print would solve the lost of internet
connectivity.
Now all that remains is the loss of vpn connectivity after some
seconds. I made some tests and realised this doesn't happen testing in
the LAN. Only if the client accesses form outside.

Best regards,
zogerdr

One thing pops into mind... If you hosting from a residential network such
as cable. They may be blocking vpn connections inbound as its considered as
running a server, same goes for smtp, pop, nntp, and http.


"Bill Grant" <not.available@online> wrote in message
news:(E-Mail Removed)...
>I have used PPTP on an XP Pro as VPN host as a test (using the new
>connection wizard to configure an incoming connection). As Jim said, the XP
>(or a third pary) firewall can be a pain.
>
> There is practically nothing that you can change in the config. I have
> no idea if you can use L2TP or how you would configure it.
>
> Jim wrote:
>> Whenever I have this problem, I start checking to see if the XP
>> firewall (or Norton/McAfee/etc.) is up. You either have to disable
>> it or configure it to allow the connection to access the
>> authenticating server.
>> Almost always, taking down the firewall (or configuring it, if
>> configurable) gets past this problem. I have one system protected by
>> a McAfee firewall that is the exception to this rule, however. I'm
>> still working on getting this one to connect. ;^)
>>
>> "zogerdr" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed) oups.com...
>>> Hi,
>>>
>>> I need to creat a VPN so a worker can acess my file server from a
>>> outside location. Unfortanetely the file server is a wxp pro. I
>>> allready configure the vpn server in that computer using the "new
>>> connection" wizzard. Also configure the client using the same tool.
>>>
>>> The thing is i'm getting an error800 in the client side, and no
>>> connection is established. From my research the 800 is due to not
>>> finding L2TP or PPTP server. (all this at the lan, just for testing
>>> purpose, only a sw in the middle). I tryed with a diferent machine,
>>> but also, xp pro as server and worked ok.
>>>
>>> On the server side I found the following things:
>>>
>>> 1. system log (warning): a certificate could not be found.
>>> connections that use the L2TP protocol over IPSEC require the
>>> instalation of a machine certificate, also known as a computer
>>> certitcate. No L2TP calls will be accepted. - error 20192
>>>
>>> I searched for this error at MS site and it really says something
>>> about the certificate. But I compare the server certifcates with
>>> another machine it seems all ok. I tested with that other machine as
>>> server and it worked fine. Is there any way to restore the defaults
>>> certs in wxp pro?
>>>
>>> 2. system log (error): (translating) The RRAS depends on the
>>> NETBIOSgroup and none of this members group as been initiated. -
>>> error 7002
>>>
>>> Allready done some research but found nothing significant....
>>>
>>> 3. Trying to initiate the IPSEC service: (translating) error 1747 -
>>> the authentication service is unknown.
>>>
>>> Allready done some research but found nothing significant....
>>> Everything I found were clues to confirm the service dependences.
>>>
>>> Anyone as clue for this? I'm considering formating the "server"...
>>>
>>> Two other things regarding this mather. I manage to have wxppro for
>>> testing that work fine. The VPN tunnel is established but than 2
>>> things happen:
>>>
>>> 1. After more or less 1 minute both the server and the client stop
>>> the ping -t.
>>>
>>> 2. The client machine loses its acess to internet.
>>>
>>> Sorry for the long text. Hope somebody can give me a help.
>>>
>>> Tks in advance.
>>>
>>> Best regards,
>>> zogerdr
>
>