VPN Setup

Hi!

I've been trying for a while now to set up a VPN on a Windows 2000
Server (R2) and I'm not having much luck. This is a server behind a
firewall and I have the right ports open as far as I know. It's
configured as a single adapter VPN server.

When trying to connect from the client I was getting an error (789)
indicating there's no pre-shared key on the server. So I defined one
and configured the client with it. Now I'm getting:

Error 792: The L2TP connection attempt failed because the security
negotiation timed out.

There's a MS KBase article on it and it says:

"This behavior can occur because you have a preshared key that is
configured on the client, but the key is not configured on the Routing
and Remote Access Service server."

They then proceed to instruct me on how to remove the pre-shared key
from the client. (??? Why, if the problem is on the server?) I'm lost
with this. Every document I've found outlines this simple wizard type
setup, which I've been through and everything should work. But I have
yet to get anything to work.

Any ideas?
Thanks!

Maybe you should setup PPTP VPN instead of L2TP. This how to may help,

Setup Windows 2003 VPN with one NICHow to setup VPN and NAT on Windows Server 2003 as a router ... Select Virtual Private Network [VPN] access and NAT in the Configuration of Routing and . ...
http://www.howtonetworking.com/VPN/2003vpn11.htm


In the client side, following this how to:

How to setup VPNHow to configure W2K server as VPN server How to configure Win 2000/XP Pro as VPN host How to configure a W2K/XP as VPN client ...
http://www.howtonetworking.com/Windows/vpnsetup.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Tom wilson" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
Hi!

I've been trying for a while now to set up a VPN on a Windows 2000
Server (R2) and I'm not having much luck. This is a server behind a
firewall and I have the right ports open as far as I know. It's
configured as a single adapter VPN server.

When trying to connect from the client I was getting an error (789)
indicating there's no pre-shared key on the server. So I defined one
and configured the client with it. Now I'm getting:

Error 792: The L2TP connection attempt failed because the security
negotiation timed out.

There's a MS KBase article on it and it says:

"This behavior can occur because you have a preshared key that is
configured on the client, but the key is not configured on the Routing
and Remote Access Service server."

They then proceed to instruct me on how to remove the pre-shared key
from the client. (??? Why, if the problem is on the server?) I'm lost
with this. Every document I've found outlines this simple wizard type
setup, which I've been through and everything should work. But I have
yet to get anything to work.

Any ideas?
Thanks!

It worked, thanks! I was able to establish a connection finally.

Now what? I'm connected but I can't see the remote network. I can't
ping any of its servers or join the domain. So although I seem to
have a connection, it doesn't appear to be able to do anything. I was
connecting from a machine at home, configured for the Workgroup
"HOME". Do I need to join the remote domain? I'm a bit confused at
this point.

Thanks!



On Mon, 21 May 2007 14:59:21 -0500, "Robert L [MVP - Networking]"
<(E-Mail Removed)> wrote:

>Maybe you should setup PPTP VPN instead of L2TP. This how to may help,
>
>Setup Windows 2003 VPN with one NICHow to setup VPN and NAT on Windows Server 2003 as a router ... Select Virtual Private Network [VPN] access and NAT in the Configuration of Routing and . ...
> http://www.howtonetworking.com/VPN/2003vpn11.htm
>
>
>In the client side, following this how to:
>
>How to setup VPNHow to configure W2K server as VPN server How to configure Win 2000/XP Pro as VPN host How to configure a W2K/XP as VPN client ...
> http://www.howtonetworking.com/Windows/vpnsetup.htm
>
>
>Bob Lin, MS-MVP, MCSE & CNE
>Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
>How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Tom wilson" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
> Hi!
>
> I've been trying for a while now to set up a VPN on a Windows 2000
> Server (R2) and I'm not having much luck. This is a server behind a
> firewall and I have the right ports open as far as I know. It's
> configured as a single adapter VPN server.
>
> When trying to connect from the client I was getting an error (789)
> indicating there's no pre-shared key on the server. So I defined one
> and configured the client with it. Now I'm getting:
>
> Error 792: The L2TP connection attempt failed because the security
> negotiation timed out.
>
> There's a MS KBase article on it and it says:
>
> "This behavior can occur because you have a preshared key that is
> configured on the client, but the key is not configured on the Routing
> and Remote Access Service server."
>
> They then proceed to instruct me on how to remove the pre-shared key
> from the client. (??? Why, if the problem is on the server?) I'm lost
> with this. Every document I've found outlines this simple wizard type
> setup, which I've been through and everything should work. But I have
> yet to get anything to work.
>
> Any ideas?
> Thanks!

A VPN connection just gives you a point to point connection between your
machine and the server. It is not like a LAN connection. Does the remote
client get an IP address in the same IP subnet as your LAN machines? Can you
ping a LAN machine by its IP address? If you can, your routing is OK. To be
able to ping by name you will need to use DNS.

Can you ping a LAN machine using its FQDN? If so DNS is working. To ping
using just its name you will need to add the correct DNS suffix to
propeerties of the remote machine.

"Tom wilson" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> It worked, thanks! I was able to establish a connection finally.
>
> Now what? I'm connected but I can't see the remote network. I can't
> ping any of its servers or join the domain. So although I seem to
> have a connection, it doesn't appear to be able to do anything. I was
> connecting from a machine at home, configured for the Workgroup
> "HOME". Do I need to join the remote domain? I'm a bit confused at
> this point.
>
> Thanks!
>
>
>
> On Mon, 21 May 2007 14:59:21 -0500, "Robert L [MVP - Networking]"
> <(E-Mail Removed)> wrote:
>
>>Maybe you should setup PPTP VPN instead of L2TP. This how to may help,
>>
>>Setup Windows 2003 VPN with one NICHow to setup VPN and NAT on Windows
>>Server 2003 as a router ... Select Virtual Private Network [VPN] access
>>and NAT in the Configuration of Routing and . ...
>> http://www.howtonetworking.com/VPN/2003vpn11.htm
>>
>>
>>In the client side, following this how to:
>>
>>How to setup VPNHow to configure W2K server as VPN server How to configure
>>Win 2000/XP Pro as VPN host How to configure a W2K/XP as VPN client ...
>> http://www.howtonetworking.com/Windows/vpnsetup.htm
>>
>>
>>Bob Lin, MS-MVP, MCSE & CNE
>>Networking, Internet, Routing, VPN Troubleshooting on
>>http://www.ChicagoTech.net
>>How to Setup Windows, Network, VPN & Remote Access on
>>http://www.HowToNetworking.com
>> "Tom wilson" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>> Hi!
>>
>> I've been trying for a while now to set up a VPN on a Windows 2000
>> Server (R2) and I'm not having much luck. This is a server behind a
>> firewall and I have the right ports open as far as I know. It's
>> configured as a single adapter VPN server.
>>
>> When trying to connect from the client I was getting an error (789)
>> indicating there's no pre-shared key on the server. So I defined one
>> and configured the client with it. Now I'm getting:
>>
>> Error 792: The L2TP connection attempt failed because the security
>> negotiation timed out.
>>
>> There's a MS KBase article on it and it says:
>>
>> "This behavior can occur because you have a preshared key that is
>> configured on the client, but the key is not configured on the Routing
>> and Remote Access Service server."
>>
>> They then proceed to instruct me on how to remove the pre-shared key
>> from the client. (??? Why, if the problem is on the server?) I'm lost
>> with this. Every document I've found outlines this simple wizard type
>> setup, which I've been through and everything should work. But I have
>> yet to get anything to work.
>>
>> Any ideas?
>> Thanks!
>