Windows 2000 serving VPN through Belkin router

Hi,

I'm trying to use windows 2000 as a vpn server through a Belkin router. If I
place the server in the router's DMZ, it works fine. However, I cannot get
it to work when behind the router's firewall.
I have set port 1723 as a virtual server so that it is routed to the windows
2000 machine, but this doesn't seem to do it.
Are there any other ports that need to be set to forward to the windows 2000
machine?
Has anyone had any experience with this?

Thanks.

Jon

Do you get an error 721? That usually means that the router is blocking
GRE.

GRE is an IP protocol, not a port. The PPTP packets have a GRE header,
so VPN fails to transfer any data if GRE is blocked.

Look for GRE by name or by protocol number in your router specs. Also
look for PPTP pass-through mode. That usually means allow GRE.

"Jonathan Fitt" <(E-Mail Removed)> wrote in message
news:WpITd.544$(E-Mail Removed)...
> Hi,
>
> I'm trying to use windows 2000 as a vpn server through a Belkin router. If
> I place the server in the router's DMZ, it works fine. However, I cannot
> get it to work when behind the router's firewall.
> I have set port 1723 as a virtual server so that it is routed to the
> windows 2000 machine, but this doesn't seem to do it.
> Are there any other ports that need to be set to forward to the windows
> 2000 machine?
> Has anyone had any experience with this?
>
> Thanks.
>
> Jon
>

"Bill Grant" <not.available@online> wrote in message
news:(E-Mail Removed)...
> Do you get an error 721? That usually means that the router is blocking
> GRE.

Yup, it's 721.

> GRE is an IP protocol, not a port. The PPTP packets have a GRE header,
> so VPN fails to transfer any data if GRE is blocked.
>
> Look for GRE by name or by protocol number in your router specs. Also
> look for PPTP pass-through mode. That usually means allow GRE.

I've searched for an "allow GRE" setting, but there's nothing like that. The
router claims to support VPN passthough for PPTP and IPsec.
http://search.belkin.com/cgi-bin/Msm...hiword=vpn%2A+

The support guy was no help. He just kept saying that I needed to open to
the right port. I was trying t tell him I thought I had, but he was having
none of it.

Jon

> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
> news:WpITd.544$(E-Mail Removed)...
>> Hi,
>>
>> I'm trying to use windows 2000 as a vpn server through a Belkin router.
>> If I place the server in the router's DMZ, it works fine. However, I
>> cannot get it to work when behind the router's firewall.
>> I have set port 1723 as a virtual server so that it is routed to the
>> windows 2000 machine, but this doesn't seem to do it.
>> Are there any other ports that need to be set to forward to the windows
>> 2000 machine?
>> Has anyone had any experience with this?
>>
>> Thanks.
>>
>> Jon
>>
>
>

That doesn't surprise me. Even the documentation for some routers refers
to GRE as being port 47! It isn't a port at all, but a protocol.

"Jonathan Fitt" <(E-Mail Removed)> wrote in message
news:CNEUd.1341$(E-Mail Removed)...
> "Bill Grant" <not.available@online> wrote in message
> news:(E-Mail Removed)...
>> Do you get an error 721? That usually means that the router is
>> blocking GRE.
>
> Yup, it's 721.
>
>> GRE is an IP protocol, not a port. The PPTP packets have a GRE header,
>> so VPN fails to transfer any data if GRE is blocked.
>>
>> Look for GRE by name or by protocol number in your router specs. Also
>> look for PPTP pass-through mode. That usually means allow GRE.
>
> I've searched for an "allow GRE" setting, but there's nothing like that.
> The router claims to support VPN passthough for PPTP and IPsec.
> http://search.belkin.com/cgi-bin/Msm...hiword=vpn%2A+
>
> The support guy was no help. He just kept saying that I needed to open to
> the right port. I was trying t tell him I thought I had, but he was having
> none of it.
>
> Jon
>
>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>> news:WpITd.544$(E-Mail Removed)...
>>> Hi,
>>>
>>> I'm trying to use windows 2000 as a vpn server through a Belkin router.
>>> If I place the server in the router's DMZ, it works fine. However, I
>>> cannot get it to work when behind the router's firewall.
>>> I have set port 1723 as a virtual server so that it is routed to the
>>> windows 2000 machine, but this doesn't seem to do it.
>>> Are there any other ports that need to be set to forward to the windows
>>> 2000 machine?
>>> Has anyone had any experience with this?
>>>
>>> Thanks.
>>>
>>> Jon
>>>
>>
>>
>
>

Thing is, it clearly says that it's compatible with PPTP and IPSec pass
through. So doesn't that imply GRE support even though the tech support guys
don't know what they're talking about?


"Bill Grant" <not.available@online> wrote in message
news:%(E-Mail Removed)...
> That doesn't surprise me. Even the documentation for some routers refers
> to GRE as being port 47! It isn't a port at all, but a protocol.
>
> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
> news:CNEUd.1341$(E-Mail Removed)...
>> "Bill Grant" <not.available@online> wrote in message
>> news:(E-Mail Removed)...
>>> Do you get an error 721? That usually means that the router is
>>> blocking GRE.
>>
>> Yup, it's 721.
>>
>>> GRE is an IP protocol, not a port. The PPTP packets have a GRE
>>> header, so VPN fails to transfer any data if GRE is blocked.
>>>
>>> Look for GRE by name or by protocol number in your router specs. Also
>>> look for PPTP pass-through mode. That usually means allow GRE.
>>
>> I've searched for an "allow GRE" setting, but there's nothing like that.
>> The router claims to support VPN passthough for PPTP and IPsec.
>> http://search.belkin.com/cgi-bin/Msm...hiword=vpn%2A+
>>
>> The support guy was no help. He just kept saying that I needed to open to
>> the right port. I was trying t tell him I thought I had, but he was
>> having none of it.
>>
>> Jon
>>
>>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>>> news:WpITd.544$(E-Mail Removed)...
>>>> Hi,
>>>>
>>>> I'm trying to use windows 2000 as a vpn server through a Belkin router.
>>>> If I place the server in the router's DMZ, it works fine. However, I
>>>> cannot get it to work when behind the router's firewall.
>>>> I have set port 1723 as a virtual server so that it is routed to the
>>>> windows 2000 machine, but this doesn't seem to do it.
>>>> Are there any other ports that need to be set to forward to the windows
>>>> 2000 machine?
>>>> Has anyone had any experience with this?
>>>>
>>>> Thanks.
>>>>
>>>> Jon
>>>>
>>>
>>>
>>
>>
>
>

Well, yes it does. But it wouldn't be the first time that a manufacturer
claimed this worked, but it didn't! Are you running the latest version of
the firmware?

The only other thing I can suggest is to thoroughly search for a switch
or setting which relates to pptp pass-through, or mentions GRE by name or by
protocol number.

"Jonathan Fitt" <(E-Mail Removed)> wrote in message
news:SaYUd.227$(E-Mail Removed)...
> Thing is, it clearly says that it's compatible with PPTP and IPSec pass
> through. So doesn't that imply GRE support even though the tech support
> guys don't know what they're talking about?
>
>
> "Bill Grant" <not.available@online> wrote in message
> news:%(E-Mail Removed)...
>> That doesn't surprise me. Even the documentation for some routers
>> refers to GRE as being port 47! It isn't a port at all, but a protocol.
>>
>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>> news:CNEUd.1341$(E-Mail Removed)...
>>> "Bill Grant" <not.available@online> wrote in message
>>> news:(E-Mail Removed)...
>>>> Do you get an error 721? That usually means that the router is
>>>> blocking GRE.
>>>
>>> Yup, it's 721.
>>>
>>>> GRE is an IP protocol, not a port. The PPTP packets have a GRE
>>>> header, so VPN fails to transfer any data if GRE is blocked.
>>>>
>>>> Look for GRE by name or by protocol number in your router specs.
>>>> Also look for PPTP pass-through mode. That usually means allow GRE.
>>>
>>> I've searched for an "allow GRE" setting, but there's nothing like that.
>>> The router claims to support VPN passthough for PPTP and IPsec.
>>> http://search.belkin.com/cgi-bin/Msm...hiword=vpn%2A+
>>>
>>> The support guy was no help. He just kept saying that I needed to open
>>> to the right port. I was trying t tell him I thought I had, but he was
>>> having none of it.
>>>
>>> Jon
>>>
>>>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>>>> news:WpITd.544$(E-Mail Removed)...
>>>>> Hi,
>>>>>
>>>>> I'm trying to use windows 2000 as a vpn server through a Belkin
>>>>> router. If I place the server in the router's DMZ, it works fine.
>>>>> However, I cannot get it to work when behind the router's firewall.
>>>>> I have set port 1723 as a virtual server so that it is routed to the
>>>>> windows 2000 machine, but this doesn't seem to do it.
>>>>> Are there any other ports that need to be set to forward to the
>>>>> windows 2000 machine?
>>>>> Has anyone had any experience with this?
>>>>>
>>>>> Thanks.
>>>>>
>>>>> Jon
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

There are no settings which mention pptp, GRE, or VPNs at all.
I'm just going to have to leave the vpn server in the dmz and hope that the
software firewall's good enough.
The only thing I can think of is that maybe the router works at the client
end but not the server end?


"Bill Grant" <not.available@online> wrote in message
news:(E-Mail Removed)...
> Well, yes it does. But it wouldn't be the first time that a
> manufacturer claimed this worked, but it didn't! Are you running the
> latest version of the firmware?
>
> The only other thing I can suggest is to thoroughly search for a switch
> or setting which relates to pptp pass-through, or mentions GRE by name or
> by protocol number.
>
> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
> news:SaYUd.227$(E-Mail Removed)...
>> Thing is, it clearly says that it's compatible with PPTP and IPSec pass
>> through. So doesn't that imply GRE support even though the tech support
>> guys don't know what they're talking about?
>>
>>
>> "Bill Grant" <not.available@online> wrote in message
>> news:%(E-Mail Removed)...
>>> That doesn't surprise me. Even the documentation for some routers
>>> refers to GRE as being port 47! It isn't a port at all, but a protocol.
>>>
>>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>>> news:CNEUd.1341$(E-Mail Removed)...
>>>> "Bill Grant" <not.available@online> wrote in message
>>>> news:(E-Mail Removed)...
>>>>> Do you get an error 721? That usually means that the router is
>>>>> blocking GRE.
>>>>
>>>> Yup, it's 721.
>>>>
>>>>> GRE is an IP protocol, not a port. The PPTP packets have a GRE
>>>>> header, so VPN fails to transfer any data if GRE is blocked.
>>>>>
>>>>> Look for GRE by name or by protocol number in your router specs.
>>>>> Also look for PPTP pass-through mode. That usually means allow GRE.
>>>>
>>>> I've searched for an "allow GRE" setting, but there's nothing like
>>>> that. The router claims to support VPN passthough for PPTP and IPsec.
>>>> http://search.belkin.com/cgi-bin/Msm...hiword=vpn%2A+
>>>>
>>>> The support guy was no help. He just kept saying that I needed to open
>>>> to the right port. I was trying t tell him I thought I had, but he was
>>>> having none of it.
>>>>
>>>> Jon
>>>>
>>>>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>>>>> news:WpITd.544$(E-Mail Removed)...
>>>>>> Hi,
>>>>>>
>>>>>> I'm trying to use windows 2000 as a vpn server through a Belkin
>>>>>> router. If I place the server in the router's DMZ, it works fine.
>>>>>> However, I cannot get it to work when behind the router's firewall.
>>>>>> I have set port 1723 as a virtual server so that it is routed to the
>>>>>> windows 2000 machine, but this doesn't seem to do it.
>>>>>> Are there any other ports that need to be set to forward to the
>>>>>> windows 2000 machine?
>>>>>> Has anyone had any experience with this?
>>>>>>
>>>>>> Thanks.
>>>>>>
>>>>>> Jon
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

The connection will certainly fail if anything in the path blocks GRE. So
all routers in the path must allow it. Some ISPs useed to use GRE
internally, so they blocked it on their routers. I don't know of any that
still do.

"Jonathan Fitt" <(E-Mail Removed)> wrote in message
news:A5CVd.353$(E-Mail Removed)...
> There are no settings which mention pptp, GRE, or VPNs at all.
> I'm just going to have to leave the vpn server in the dmz and hope that
> the software firewall's good enough.
> The only thing I can think of is that maybe the router works at the client
> end but not the server end?
>
>
> "Bill Grant" <not.available@online> wrote in message
> news:(E-Mail Removed)...
>> Well, yes it does. But it wouldn't be the first time that a
>> manufacturer claimed this worked, but it didn't! Are you running the
>> latest version of the firmware?
>>
>> The only other thing I can suggest is to thoroughly search for a
>> switch or setting which relates to pptp pass-through, or mentions GRE by
>> name or by protocol number.
>>
>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>> news:SaYUd.227$(E-Mail Removed)...
>>> Thing is, it clearly says that it's compatible with PPTP and IPSec pass
>>> through. So doesn't that imply GRE support even though the tech support
>>> guys don't know what they're talking about?
>>>
>>>
>>> "Bill Grant" <not.available@online> wrote in message
>>> news:%(E-Mail Removed)...
>>>> That doesn't surprise me. Even the documentation for some routers
>>>> refers to GRE as being port 47! It isn't a port at all, but a protocol.
>>>>
>>>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>>>> news:CNEUd.1341$(E-Mail Removed)...
>>>>> "Bill Grant" <not.available@online> wrote in message
>>>>> news:(E-Mail Removed)...
>>>>>> Do you get an error 721? That usually means that the router is
>>>>>> blocking GRE.
>>>>>
>>>>> Yup, it's 721.
>>>>>
>>>>>> GRE is an IP protocol, not a port. The PPTP packets have a GRE
>>>>>> header, so VPN fails to transfer any data if GRE is blocked.
>>>>>>
>>>>>> Look for GRE by name or by protocol number in your router specs.
>>>>>> Also look for PPTP pass-through mode. That usually means allow GRE.
>>>>>
>>>>> I've searched for an "allow GRE" setting, but there's nothing like
>>>>> that. The router claims to support VPN passthough for PPTP and IPsec.
>>>>> http://search.belkin.com/cgi-bin/Msm...hiword=vpn%2A+
>>>>>
>>>>> The support guy was no help. He just kept saying that I needed to open
>>>>> to the right port. I was trying t tell him I thought I had, but he was
>>>>> having none of it.
>>>>>
>>>>> Jon
>>>>>
>>>>>> "Jonathan Fitt" <(E-Mail Removed)> wrote in message
>>>>>> news:WpITd.544$(E-Mail Removed)...
>>>>>>> Hi,
>>>>>>>
>>>>>>> I'm trying to use windows 2000 as a vpn server through a Belkin
>>>>>>> router. If I place the server in the router's DMZ, it works fine.
>>>>>>> However, I cannot get it to work when behind the router's firewall.
>>>>>>> I have set port 1723 as a virtual server so that it is routed to the
>>>>>>> windows 2000 machine, but this doesn't seem to do it.
>>>>>>> Are there any other ports that need to be set to forward to the
>>>>>>> windows 2000 machine?
>>>>>>> Has anyone had any experience with this?
>>>>>>>
>>>>>>> Thanks.
>>>>>>>
>>>>>>> Jon
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Jonathan,

Just wondering if you found a solution, I'm having the same problem and
I think I talked to the same usless tech that didn't help you.

Thanks

I just spent another hour on the phone with Belkin, they finally had me
try and re-flash the router and it died completely, they gave up and
tole me to return it. I returned the router to CompUsa and they had a
Belkin rep on the premises and she knew exactly what the problem was.
The Belkin routers only support one way pass through, you can use the
router behind a client but not a server, I wish someone would pass that
info along to Belkin's tech support. I exchanged it with a Linksys
WRT54GS router and with opening ports 47 and 1723 my VPN works
perfectly.

kliot wrote:
> Jonathan,
>
> Just wondering if you found a solution, I'm having the same problem
and
> I think I talked to the same useless tech that didn't help you.
>
> Thanks