"hedera" <(E-Mail Removed)> wrote in message
news:1D1AC933-C41C-49A4-99F1-(E-Mail Removed)...
>I support a small nonprofit with a small network. They have an office
> computer running Win XP (patch level unknown), which uses Windows
> Firewall;
> this machine supports the Access database that contains business and
> membership records.
>
> The officers use a VPN to connect to the office computer, since they keep
> local copies of the database which they update and sync. They don't use
> VPN
> clients; they just configure network connections on their laptops,
> following
> instructions which I wrote. Recently the VPN stopped working for no
> visible
> reason; I'm hoping someone can suggest something to try.
>
> The VPN is supported by a LinkSys BEFSX41 ver2 router, 4 Ethernet ports.
> The firewall is enabled; ports 1723, 47, and 1701 are forwarded to the
> office
> computer at its static IP 192.168.23.101., which is configured on the LAN
> connection. IPSec passthrough is enabled. Other items plugged into the
> LinkSys are a LinkSys VoIP router and a NetGear 8 port Ethernet switch.
> The
> office computer is plugged into the NetGear switch, as are Ethernet cables
> for use by wandering volunteers' laptops.
>
> The internal router IP is 192.168.23.1, and it also serves DHCP for 50
> addresses starting at .150. The subnet mask is 255.255.255.0. The
> Internet
> connection is PPoE and the IP is not static, so we use DynDNS, which the
> router supports, to provide a stable host name for the VPN connection.
>
> The router seems to be working; full Internet access is available. But
> attempts to open the VPN get 1 of 2 errors depending on the source: my
> Vista
> laptop gets RRAS error 800; my XP desktop gets RRAS error 678. Attempts
> to
> telnet to port 1732 at the DynDNS hostname (or its fronted IP, I've tried
> both) produce a time-out, as did DynDNS's Open Port tool.
>
> I'm almost positive, having read the online materials about VPNs, that the
> router setup is correct; but we rebuilt the configuration Saturday, and
> I'm
> wondering if there was some other configuration that I didn't have
> documented.
>
> I tried (shame on me!) turning off the Windows firewall on the office
> computer briefly, and I still couldn't connect to the VPN; but I'm not
> sure
> if I should have expected to, because I was connected by Ethernet to the
> local LAN, same network as the office server. I didn't have another
> network
> with Internet access available to try from.
>
> So: is the Windows firewall configuration a possible culprit? Or was my
> failure to connect because I wasn't on the "outside" of the router? If
> the
> firewall isn't a possible culprit, what other configurations might be the
> problem? Any suggestions most gratefully accepted. We tried rebooting
> everything again, and we tried taking the NetGear switch and the VoIP
> router
> out of the connection and plugging the office computer directly into the
> LinkSys - didn't help, still no response on the port.
>
> --
Hello Hedera,
Essentially using the Windows built-in networking VPN, is a VPN client
that's built in to the operating system.
Are you saying the XP machine is the VPN server?
Assuming the XP machine is accepting VPN connections, then you would be
using PPTP VPN, and not L2TP IPSec VPN, so then port 1701 is not needed.
You'll need port 1723, which you've already configured, but you will also
need GRE, also called Protocol ID #47 (this is not Port 47) to be opened. I
believe to do that, you just need to enable PPTP checkbox. You'll need to
double check the Linksys docs on this.
As for the error messages, they are saying that the VPN connection cannot be
established because something is either blocking it or not configured. My
feeling is GRE is not configured correctly to go inbound to the XP machine.
Click on the following link, then click on your error number:
http://www.chicagotech.net/raserrors.htm
You said you had this working before and it stopped suddenly. Did something
change, such as an update, or someone install any software on the XP box?
Testing this internally trying to connect through the router won't do the
trick, because it doesn't support 'U-Turns' You can, however, test it
internally by connecting directly to the XP machine.
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Please reply back to the newsgroup or forum to benefit from collaboration
among responding engineers, and to help others benefit from your resolution.
Ace Fekay, MCT, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer
(E-Mail Removed)
http://twitter.com/acefekay
For urgent issues, you may want to contact Microsoft PSS directly. Please
check
http://support.microsoft.com for regional support phone numbers.