Re: VPN behind firewall

From: Marc Reynolds [MSFT] (marcrey_at_online.microsoft.com)
Date: 02/18/04


Date: Wed, 18 Feb 2004 11:32:05 -0600

Besides TCP 1723 you also need to allow IP Protocol 47 (GRE).

-- 
Thanks,
Marc Reynolds
Microsoft Technical Support
This posting is provided "AS IS" with no warranties, and confers no rights.
"Alejandro" <aelviretti@amkm.com.ar> wrote in message
news:128ac01c3f63c$1b7f8b00$a601280a@phx.gbl...
Hi, I am trying to create VPN access for mobile users
using existing hard so what I have, are a Firewall
(hardware) and a win2k app server acting as RRAS - VPN
server. A nic of this server has a static IP (nat on
firewall).
All conections are ok, in fact this ip is used to access
from internet to a specific tcp application port without
problem.
The problem I have is to permit the tcp-udp ports needed
for the conection with the MS VPN server. I 've been
reading about it in technet, but I must be committing a
mistake cause i can not get the server!.
I `īve been open tcp por 1723 for pptp conection and when
I try from VPN client (xp) seems to conect but stop
responding while validating user and password.
What i dong wrong?
thanks


Relevant Pages

  • Re: VPN Error 720
    ... I think the Zywall is not configured for VPN passthrough. ... TCP Port 1723 on the other endpoint. ... In the system log on the server I get the following message: ...
    (microsoft.public.windows.server.sbs)
  • Problems using VPN through a BT router
    ... I have been trying to do a VPN to an SBS server but without much luck. ... I have opened the ports i think i ... TCP - 443 ...
    (microsoft.public.windows.server.sbs)
  • Re: Samba over SSH
    ... try using nfs with tcp connection through ... even in the case of a disconnection of the vpn. ... We use this to connect to a cvs server and it works great. ... >> ssh. ...
    (freebsd-questions)
  • Re: AD Replication over SonicWall site-to-site VPN
    ... don't like manually setting the server MTU size as a solution though. ... there are no explicit prohibitions on any of the ports required. ... we have some firewalls that we can restrict VPN ... Global Catalog Server TCP 3269 ...
    (microsoft.public.windows.server.active_directory)
  • VPN behind firewall
    ... using existing hard so what I have, are a Firewall ... and a win2k app server acting as RRAS - VPN ... for the conection with the MS VPN server. ...
    (microsoft.public.win2000.networking)