Re: L2TP/IPSec VPN tunnel Client -> Server

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Sharoon Shetty K [MSFT] (sharoons_at_online.microsoft.com)
Date: 03/18/04 

Date: Thu, 18 Mar 2004 19:01:31 +0530

What is the error you get while establishing the L2TP connection? Do you
proper certificates installed at the client machine?

VPN ports required:
PPTP - 1723, GRE Protocol [47]
L2TP - 1701, 500 [IKE] and 4500 [NAT-T] 

-- 
Thanks
Sharoon
sharoons@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights.
"Dennis van Vroonhoven" <dontknow> wrote in message
news:eNYAGPNDEHA.3472@TK2MSFTNGP09.phx.gbl...
> Hi,
>
> What are the limitations for L2TP/IPSec?
> I have a Firewall (which does no NAT), behind that Firewall I have a
Windows
> 2000 Server SP4 configured for NAT and Routing & Remote Access. I have
> configured Routing & Remote Access to accept L2TP and PPTP connections.
Both
> work when connecting from the inside network to the inside ipadress of the
> server, but when connecting to the external ipadress the PPTP works fine
but
> the L2TP fails. Furthermore I will have to get my managed firewall
> configured to pass L2TP/IPSec, the only ports needed are L2TP (UDP 1701)
and
> IPSec (TCP 500)??
>
> Thanks,
> Dennis
>
>

Relevant Pages

  • GRE packets lost at second pptp connection attempt ?
    ... I have a win 98 clinet connecting to a PPTP server via the following: ... firewall. ...
    (microsoft.public.win2000.general)
  • Re: VPN server
    ... PPTP is encrypted, you can use L2TP without certificates. ... You can use a pre-shared key instead of a certificate for L2TP/IPSec ... Well you have to configure the RRAS VPN service (see buiilt-in Help* or ...
    (microsoft.public.windows.server.active_directory)
  • Re: Which is better PPTP or L2PT
    ... Pptp is not as secure as l2tp but it may be secure enough. ... l2tp requires the use of computer certificates and will not work over a NAT ... the internet can try to hack your VPN server because computer authentication ...
    (microsoft.public.windows.server.networking)
  • Re: MS-CHAPv2 encryption
    ... If you have a windows 2003 server, and if you decide to use L2TP, you can do ... it even with NAT. ... PPTP is nice, I do agree. ... Hardware+pincode authentication rather than a domain\user+password. ...
    (microsoft.public.win2000.networking)
  • Re: Multiple VPN connections from behind a NAT - Netgear and Linksys routers
    ... L2TP, PPTP and IPSec all at the same time? ... Number of passthroughs are important only if you have multiple ... > of the time you will find routers which terminate IPSec tunnels. ...
    (microsoft.public.windowsxp.work_remotely)