Weird VPN things

We have a W2K server that just does our VPN (PPTP). This was already setup
before I got here. There haven't been any changes that I know of, but
suddenly we have users who cannot connect. Here is our list of issues:

* users receiving certificate errors when trying to connect
* users who used to connect, now are unable to (no changes on remotes)
It just hangs on "Connecting...". Then shows an error msg "Unable to
establish the VPN connection. The VPN server may be unreacheable or security
parameters may not be configured properly for this connection." Still able
to ping the address/IP of the VPN server.
* users who can still connect fine
* new user acounts that are able to connect when added to RAS group
* older user accounts that cannot connect when added to RAS group
* older user account that can connect fine (which causes head scratching)

I don't think anything has changed on the server side. Maybe in the routing
or firewall? I'm not up to my router/firewall-ese so I'm not sure. If
anyone has any place they can point me to?

Thanks,

Don
(E-Mail Removed)

1) It's unlikely firewall's/router's fault, but you can use any network
sniffer (Microsoft's Network Monitor is fine) to narrow problem's scope.

2) Try read Event Logs.


"Don Puspos" <Don (E-Mail Removed)> wrote in message
news491948C-A0F0-4C72-A1A1-(E-Mail Removed)...
> We have a W2K server that just does our VPN (PPTP). This was already
> setup
> before I got here. There haven't been any changes that I know of, but
> suddenly we have users who cannot connect. Here is our list of issues:
>
> * users receiving certificate errors when trying to connect
> * users who used to connect, now are unable to (no changes on remotes)
> It just hangs on "Connecting...". Then shows an error msg "Unable to
> establish the VPN connection. The VPN server may be unreacheable or
> security
> parameters may not be configured properly for this connection." Still
> able
> to ping the address/IP of the VPN server.
> * users who can still connect fine
> * new user acounts that are able to connect when added to RAS group
> * older user accounts that cannot connect when added to RAS group
> * older user account that can connect fine (which causes head scratching)
>
> I don't think anything has changed on the server side. Maybe in the
> routing
> or firewall? I'm not up to my router/firewall-ese so I'm not sure. If
> anyone has any place they can point me to?
>
> Thanks,
>
> Don
> (E-Mail Removed)

Do simple test. Can you ping the VPN server? can telnet port 1723?

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Don Puspos" <Don (E-Mail Removed)> wrote in message news491948C-A0F0-4C72-A1A1-(E-Mail Removed)...
We have a W2K server that just does our VPN (PPTP). This was already setup
before I got here. There haven't been any changes that I know of, but
suddenly we have users who cannot connect. Here is our list of issues:

* users receiving certificate errors when trying to connect
* users who used to connect, now are unable to (no changes on remotes)
It just hangs on "Connecting...". Then shows an error msg "Unable to
establish the VPN connection. The VPN server may be unreacheable or security
parameters may not be configured properly for this connection." Still able
to ping the address/IP of the VPN server.
* users who can still connect fine
* new user acounts that are able to connect when added to RAS group
* older user accounts that cannot connect when added to RAS group
* older user account that can connect fine (which causes head scratching)

I don't think anything has changed on the server side. Maybe in the routing
or firewall? I'm not up to my router/firewall-ese so I'm not sure. If
anyone has any place they can point me to?

Thanks,

Don
(E-Mail Removed)