RE: Other than VPN, what is affected by GRE 47?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Dear David:
Thank you for posting here.

Technically speaking, GRE 47 protocol is used for PPTP connection between
the remote client and the VPN Server. It only affects the VPN connection
and nothing else will be affected by the router that doesn't fully
supported GRE 47 protocol. For example, RWW is using the port 80/443/4125,
OWA is using the port 443.

In most cases, we use the utility called "PPTP Ping" to test if 1723 port
and GRE protocol are allowed to pass through.

To do so:
a. Please run Pptpsrv.exe on the server side.
b. Run Pptpclnt.exe [ServerNameorIPaddress] on remote client.
c. When prompted by Pptpclnt.exe, type some text to send to Pptpsrv.exe,
and then click Enter.
d. You will see the text received at the host running Pptpsrv.exe. Then you
will see five GRE packets sent from Pptpclnt.exe and received at
Pptpsrv.exe.

NOTE: PPTP Ping tools (Pptpclnt and Pptpsrv) exist in Windows XP support
tools. For your convenience, I have attached the file within this reply.

NOTE: You should stop the Routing and Remote Access service on the RRAS
(VPN) server so that PPTPSRV can bind to port 1723

For your information: We usually use PPTP Ping utility to determine whether
any hardware router or firewall is blocking GRE Protocol 47. The router
must be able to pass Generic Route Encapsulation (GRE) protocol 47 for PPTP
traffic to connect correctly to use VPN. When a cable/DSL router cannot map
GRE protocol 47 to the Routing and Remote Access server, you cannot connect
to the server from the Internet.

More information about GRE 47:

VPN Tunnels- GRE Protocol 47 Packet Description and Use
http://support.microsoft.com/default.aspx?scid=KB;[LN];241251

Hope the above information helps. Please feel free to let me know if you
have any questions or concerns.

Have a nice day, David! :-)

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Other than VPN, what is affected by GRE 47?
| thread-index: AcW4iZxSDl9AAl3FQxelmSU/8pKqEQ==
| X-WBNR-Posting-Host: 24.153.141.186
| From: =?Utf-8?B?ZHNhdGNoZWxs?= <support@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: Other than VPN, what is affected by GRE 47?
| Date: Tue, 13 Sep 2005 10:36:02 -0700
| Lines: 12
| Message-ID: <E2424C42-B7F4-4E23-8C80-CA55824B4EC1@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:152992
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I know that VPN uses GRE 47 and that some routers/firewalls have to be
| specifically configured for GRE 47, but what else is affected by a router
| that isn't correctly set up for GRE 47?
|
| VPN - affectted
| RWW -
| OWA -
| OMA -
| ???
|
| Thanx, David.
|
|

.



Relevant Pages

  • Re: PC specific vpn issues
    ... You said you could run pptpclnt/pptpsrv successfully from the client...but just to be clear, pptpsrv needs to be run on the SERVER. ... the pptp ping tools only verify GRE. ... The fact that other machines are working and the same account works on other machines tells me a pretty blatant communications issue with the client, not the server. ... I tried connecting to another company's SBS vpn and have same issue. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Disconnection
    ... 1- Replace the router with another router from different model/brand. ... also known as VPN pass.-through very well. ... Pass.trough traffic (or GRE or Protocol 47 traffic). ... you to make this setting forward the traffic to your server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Error 800
    ... Ensure that GRE is not blocked by the router. ... GRE is a protocol, just as TCP is a protocol. ... > After I thought I configured my VPN server according to A ...
    (microsoft.public.win2000.ras_routing)
  • Re: pix vpn traffic
    ... :Is the following log related to VPN traffic? ... :What is GRE protocol? ... Is it related to VPN connection? ... :the protocol that used in the VPN connection? ...
    (comp.dcom.sys.cisco)
  • Re: ISA/VPN/Router
    ... I don't know how to enable IP GRE 47. ... after I forward port 47 to the SBS. ... I understand that when you try to establish a VPN ... >> a PPTP client and a PPTP server. ...
    (microsoft.public.windows.server.sbs)