VPN: 721 & 619 errors

I'm trying to establish a VPN and configured RAS (did not use the wizard) on
a Windows 2003 Sever also running an public company website. I believe the
configuration is correct. The server has a static non-routable. It's public
address is established via NAT via a Netopia 4622 router. I configured the
router using an online technote to config PPTP and other changes needed to
allow pass-through of VPN. I've also temorarily disconnected other external
firewall to take it out of the mix.

If I attempt to establish a connection via a client using the external IP
address, it hangs on verifying username & password and eventually displays a
721 or 619 error, stating that the connecteion could not be established or
the servev cannot be reached. This will happen inside or outside the lan.
If I change the client settings to the internal non-routable address,. the
VPN works fine inside the lan.

I read several articles on 721 & 619 errors and believe the solutions (such
as ensuring the server is registered in AD & ensuring ports GRE47 and 1723
are open), but none of then seem to apply in this case.

I'm pulling my hair out because netopia won't support the router beyond the
config and the successful connection inside the lan using the 192 address
leads me to believe this is not a Windows issue.

ANY IDEAS??????

If it is not GRE issue, how do you setup NAT? Do you have two NICs in the server?

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Paul" <(E-Mail Removed)> wrote in message news:C64F0BD6-BE3B-4D1C-AEFC-(E-Mail Removed)...
I'm trying to establish a VPN and configured RAS (did not use the wizard) on
a Windows 2003 Sever also running an public company website. I believe the
configuration is correct. The server has a static non-routable. It's public
address is established via NAT via a Netopia 4622 router. I configured the
router using an online technote to config PPTP and other changes needed to
allow pass-through of VPN. I've also temorarily disconnected other external
firewall to take it out of the mix.

If I attempt to establish a connection via a client using the external IP
address, it hangs on verifying username & password and eventually displays a
721 or 619 error, stating that the connecteion could not be established or
the servev cannot be reached. This will happen inside or outside the lan.
If I change the client settings to the internal non-routable address,. the
VPN works fine inside the lan.

I read several articles on 721 & 619 errors and believe the solutions (such
as ensuring the server is registered in AD & ensuring ports GRE47 and 1723
are open), but none of then seem to apply in this case.

I'm pulling my hair out because netopia won't support the router beyond the
config and the successful connection inside the lan using the 192 address
leads me to believe this is not a Windows issue.

ANY IDEAS??????

I do have 2 NICs in the serverv, but one is disabled. NAT is setup solely on
the netopia router. The problem "appears" to be authentication as I get the
errors during verifying user name & password.

"Robert L [MS-MVP]" wrote:

> If it is not GRE issue, how do you setup NAT? Do you have two NICs in the server?
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Paul" <(E-Mail Removed)> wrote in message news:C64F0BD6-BE3B-4D1C-AEFC-(E-Mail Removed)...
> I'm trying to establish a VPN and configured RAS (did not use the wizard) on
> a Windows 2003 Sever also running an public company website. I believe the
> configuration is correct. The server has a static non-routable. It's public
> address is established via NAT via a Netopia 4622 router. I configured the
> router using an online technote to config PPTP and other changes needed to
> allow pass-through of VPN. I've also temorarily disconnected other external
> firewall to take it out of the mix.
>
> If I attempt to establish a connection via a client using the external IP
> address, it hangs on verifying username & password and eventually displays a
> 721 or 619 error, stating that the connecteion could not be established or
> the servev cannot be reached. This will happen inside or outside the lan.
> If I change the client settings to the internal non-routable address,. the
> VPN works fine inside the lan.
>
> I read several articles on 721 & 619 errors and believe the solutions (such
> as ensuring the server is registered in AD & ensuring ports GRE47 and 1723
> are open), but none of then seem to apply in this case.
>
> I'm pulling my hair out because netopia won't support the router beyond the
> config and the successful connection inside the lan using the 192 address
> leads me to believe this is not a Windows issue.
>
> ANY IDEAS??????

Paul wrote:
> I do have 2 NICs in the serverv, but one is disabled. NAT is setup solely on
> the netopia router. The problem "appears" to be authentication as I get the
> errors during verifying user name & password.
>
> "Robert L [MS-MVP]" wrote:
>
>
>>If it is not GRE issue, how do you setup NAT? Do you have two NICs in the server?
>>
>>Bob Lin, MS-MVP, MCSE & CNE
>>Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
>>How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
>> "Paul" <(E-Mail Removed)> wrote in message news:C64F0BD6-BE3B-4D1C-AEFC-(E-Mail Removed)...
>> I'm trying to establish a VPN and configured RAS (did not use the wizard) on
>> a Windows 2003 Sever also running an public company website. I believe the
>> configuration is correct. The server has a static non-routable. It's public
>> address is established via NAT via a Netopia 4622 router. I configured the
>> router using an online technote to config PPTP and other changes needed to
>> allow pass-through of VPN. I've also temorarily disconnected other external
>> firewall to take it out of the mix.
>>
>> If I attempt to establish a connection via a client using the external IP
>> address, it hangs on verifying username & password and eventually displays a
>> 721 or 619 error, stating that the connecteion could not be established or
>> the servev cannot be reached. This will happen inside or outside the lan.
>> If I change the client settings to the internal non-routable address,. the
>> VPN works fine inside the lan.
>>
>> I read several articles on 721 & 619 errors and believe the solutions (such
>> as ensuring the server is registered in AD & ensuring ports GRE47 and 1723
>> are open), but none of then seem to apply in this case.
>>
>> I'm pulling my hair out because netopia won't support the router beyond the
>> config and the successful connection inside the lan using the 192 address
>> leads me to believe this is not a Windows issue.
>>
>> ANY IDEAS??????

** As posted in .general board

Double check your router config - does the router have pptp capability
natively? has it been disabled if it does?

Is there anything in the event logs of the rras server? turn on tracing
in rras (Log addition info) - and take a look in c:\windows\tracing - if
you don't see any activity in here the the vpn connection is not
reaching the server.

Ian