Re: XP-Pro VPN client cannot reach XP-Pro VPN server machine, but any other machine in the VPN servers network...



Hi,

first of all, thanks for your quick reply :-)

Are you running a firewall on the VPN server box that may be blocking pings? Beyond the fact you can't ping the VPN server but you can fully access the network behind the server what are you worried about?

I'm only running the Windows XP internal firewall, which will be opened when activating the VPN server service, right?
Not only that I cannot ping this machine, I cannot access it. Nothing of it. I cannot reach any port, I already tried to telnet some ports I know that an application is behind that, but I'm getting no answer. So it looks to me that routing to any other machine in the network works, but not to the machine where this VPN server service is running. Any way I can check this? Calling 'tracert' will show me the correct route for the other machines, but calling it to the VPN server machine will fail:

W:\>tracert 192.168.2.110
Tracing route to 192.168.2.110 over a maximum of 30 hops

1 * * * Request timed out. // I think this is the router which cannot be pinged, right?
2 47 ms 35 ms 35 ms 192.168.2.110

Trace complete.

W:\>tracert 192.168.2.101
Tracing route to 192.168.2.101 over a maximum of 30 hops

1 * * * Request timed out. // what's going on here?
2 * * * Request timed out.
3 * * * Request timed out.
....


Also, for PPTP VPN you don't need any other port open other than TCP Port 1723 and GRE Protocol 47 traffic must be enabled through the firewall. Close UDP Port 500...

Thanks for this info. I read that from some internet forums. So I will close UDP 500 immediately.

I'm not a routing guru, so any hints are highly appreciated.

Kindest regards

Markus

.



Relevant Pages

  • Re: VPN client unable to connect to mapped drives
    ... They were also able to map a network drive manually to the ... I'm also now unable to ping the 201 address from the internal network. ... Do i need to set up the VPN server to ...
    (microsoft.public.win2000.ras_routing)
  • Re: RRAS doesnt R
    ... After messing around with gateways and whatnot, ... to dial in, get an IP on the 192.168.0.x subnet, and ping the VPN server at ... is set to not allow clients to access the entire network. ...
    (microsoft.public.cert.exam.mcse)
  • Re: RRAS doesnt R
    ... to dial in, get an IP on the 192.168.0.x subnet, and ping the VPN server ... What's new is that I can now ping 192.168.1.254, ... is set to not allow clients to access the entire network. ...
    (microsoft.public.cert.exam.mcse)
  • Re: SP2 Firewall Breaks VPN
    ... > Computer A successfully connects to the VPN server on Computer B. I ... > am able to ping the NAT router on that remote network. ... > If I turn off the Firewall and reconnect to the VPN, ...
    (microsoft.public.windowsxp.work_remotely)
  • Windows XP VPN issues
    ... I am running a VPN server ... they can ping me but I can't ping them. ... Connection-specific DNS Suffix. ... Ethernet adapter INET: ...
    (microsoft.public.windowsxp.network_web)