Re: what about when....

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 02/06/04 

Date: Fri, 6 Feb 2004 13:21:05 -0500

Absolutely!

One difficulty with this stuff is that the error message is simply "I can't
connect." And, of course, there are a number of reasons why one might not
be able to connect.

So--troubleshooting:

1) troubleshoot using Remote Desktop Connection executable--get this
working, then try the Web connection, if you absolutely need that ability.

2) If you are able to test whether RD is active and you have the credentials
right by using a second machine on the LAN (i.e. without going out over the
Internet) this eliminates one issue--RD not working right in the first
place.

3) Don't test by sitting at a second machine behind the router and putting
in the public IP address of the router. This often fails--many routers
don't handle this nicely.

3a) If you want to test from behind the router (i.e. sitting next to the
target machine)--do this by dialling out with an analog modem, and then
connecting with the public IP address of the target router. This works very
well, if you can manage it.

4) If you want/must test from a remote location, pick one without firewalls
or proxies. Don't pick your office at work, unless you know others are able
to make this work from their desks, or you know that there isn't a proxy or
firewall which might interdict the outbound traffic. Test from a friends
house, maybe.

5) You must know the public IP address of the router at the moment you test
the connection. If this address is dynamic--that is it changes--you can use
a Dynamic DNS service to track the changes once you decide to make regular
use of the facilty-- www.dyndns.org
At any given moment, going to http://whatismyip.com from the target XP Pro
host machine should give you the current IP.

6) Telnet testing:
http://support.microsoft.com/default.aspx?scid=kb;en-us;187628 shows how to
use Telnet to test an RDP connection. Substitute your IP address for tserv
and ignore the name resolution issues mentioned, unless you are testing
within a LAN.

If you know RD is active on the host machine, have forwarded the port in the
router correctly (port 3389, TCP)--have checked that the local IP address of
the host machine hasn't changed (i.e. the port is forwarded to the right
machine), and that you have the correct public IP address--we're stumped!

Possible issues are some other firewall mechanism--software on the host
machine, port blocked by the ISP (I've never seen a confirmed case of this).
Checking on whether the ICF Internet Connection Firewall is active on the
host machine is definitely in order. In the longer term, it is good
practice to run a firewall on every machine--so you may well have the
firewall active, with RD opened through it. The ICF firewall is found in
properties of the given network connection, advanced tab. Checkbox in upper
pane enables it, and settings button at the lower right allows control
settings.

"Lonnie" <anonymous@discussions.microsoft.com> wrote in message
news:97ADC001-A3FD-4D6B-8DE9-2D4E21E177F6@microsoft.com...
>
> What about when you have the information .. such as with my linksys wrt54g
> router, you forward the port, and it still doesn't work :) can you
> maybe give me some suggestions as to what I can do? I've upgraded the
> firmware ... taken all the steps I can think of/read about to get it to
> work, to no avail.
>
> Thanks in advance for any suggestions you may give.
>
> Lonnie
>
>
> ----- Bill Sanderson wrote: -----
>
> No
> I don't know--you haven't mentioned the make and model of your router,
> and
> you are considerably closer to the manual for that device than I am!
>
> (Seriously--I can go out on the web and find a PDF of many router
> manuals,
> and read through them and figure this out, but you can too!--look for
> port
> forwarding or "virtual server" terminology.)
>
> "Jonas" <anonymous@discussions.microsoft.com> wrote in message
> news:C9059569-6DFF-4941-9AC8-CBFB57D98B5A@microsoft.com...
> > Does changing the TCP/IP properties to a fixed pool like you say
> allow
> > more than one computer to use VPN?
> >> Also how do I forward ports on my router?
> >> ----- Bill Sanderson wrote: -----
> >> One key thing to mention--XP Pro is limited to a single VPN
> > connection.
> >> You may wish to visit the properties of TCP/IP on the VPN
> connection
> > once it
> > is available, and change it to distribute IP's from a fixed
> pool--say
> > 4
> > addresses on the same subnet as the rest of the lan, but outside
> the
> > range
> > given out by any router or DHCP mechanism available.
> >> Your router will need to forward port 1723 to the XP Pro
> machine
> > acting as
> > VPN server.
> >> "Jacob" <anonymous@discussions.microsoft.com> wrote in message
> > news:236B95F1-2177-475C-962A-7D4FF4BE9516@microsoft.com...
> >> I'd like to use a computer running XP Pro as a VPN Server. Is this
> >> possible? We're using a peer-to-peer network for a small business
> > and
> >> would like to connect on the road. I know how to establish a VPN
> >> connection once the VPN server is running.
> >>> Thanks.
> >>>