VPN error 678

I am getting Error 678. I tried to check if a firewall is setup but
when I go to check it it tells me:
Firewall cannot be setup because another program is trying to use NAT
(ipnat.sys).
I would really appreciate help on this.

Assuming this is windows 2003 server, It is not recommended to use Windows Firewall on a RRAS server. this link may help,

can't enable windows firewall on rras server ... server - Windows firewall cannot run because another program or service is running that might use the network address translation component (Ipnat.sys) ...
http://www.howtonetworking.com/cases...003wf&rras.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"john" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) ups.com...
I am getting Error 678. I tried to check if a firewall is setup but
when I go to check it it tells me:
Firewall cannot be setup because another program is trying to use NAT
(ipnat.sys).
I would really appreciate help on this.

I think I found what my problem is. Even though I have NAT on the
router off, but have a NAT on the server and have openned port 1723 ,
when I telnet 1723 it says the connection failed.
Also do not know how to deploy protocol 47.

If you setup VPN with NAT, that will take care of IP protocol 47 by default. Do you have port 1723 list if using netstat -a?

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"john" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) oups.com...
I think I found what my problem is. Even though I have NAT on the
router off, but have a NAT on the server and have openned port 1723 ,
when I telnet 1723 it says the connection failed.
Also do not know how to deploy protocol 47.

When I did netstat -a , 1723 was not listed. But when I used
canyouseeme.org site it said it could see it.