Re: VPN Client

Hi Crina

Thanks for your help. I spoke to Netgear who advised me that GRE Protocol is
enabled. I worked out that you had to have Port 1723 open on both ends and
not just the server side. Once I opened Port 1723 on the external computer
it allowed the VPN connection to work.

I am wondering as I have not tried this as yet, if you want to have 3 staff
situated in an interstate office all VPN in at one time, can this happen?
They will all be VPNing from the same Internet connection. I dont think will
work as you need to tell the router which local IP Address to send Port 1723
to and I dont think you can tell it 3 different IP Address for Port 1723 but
I may be wrong.

Regards

Adam

""Crina Li"" <v-crinal@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:hi09FsRLGHA.608@xxxxxxxxxxxxxxxxxxxxxxxx
Hi Adam,

Thanks for your update.

As I know, to enable GRE Protocol 47 is based on the router. Some router
has no such function. For detailed configuration, you may need to contact
the hardware vendor.

Also I provide the following KB articles for your reference:

241251 VPN Tunnels - GRE Protocol 47 Packet Description and Use
http://support.microsoft.com/default.aspx?scid=kb;EN-US;241251

241252 VPN Tunnels - PPTP Protocol Packet Description and Use
http://support.microsoft.com/default.aspx?scid=kb;EN-US;241252

888201 You receive an "Error 721" error message when you try to establish
a
VPN connection through your Windows Server-based remote access server
http://support.microsoft.com/default.aspx?scid=kb;EN-US;888201

Thanks for your time and I look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.
--------------------
| From: "Adam Hudson" <abmhudson@xxxxxxxxxxx>
| References: <ubvYuSBLGHA.2704@xxxxxxxxxxxxxxxxxxxx>
<Xq#bdZHLGHA.608@xxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: VPN Client
| Date: Thu, 9 Feb 2006 12:01:29 +1100
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| How so you enable IP Protocol 47? I have forwarded port 1723 to the
server
| through the modem but still cant work out where to configure IP Protocl
47..
|
|
| ""Crina Li"" <v-crinal@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:Xq%23bdZHLGHA.608@xxxxxxxxxxxxxxxxxxxxxxxx
| > Hi Robert,
| >
| > Thank you for posting in SBS newsgroup.
| >
| > From your description, my understanding on this issue is: you cannot
| > establish the VPN connection to the SBS server by using the
'Connection
| > Manager' from external clients. If I have misunderstood your concern,
| > please do not hesitate to let me know.
| >
| > Would you please help me confirm if you have followed the steps below
to
| > configure VPN access on an SBS environment?
| >
| > 1. Run CEICW, follow the wizard and select Enable firewall and then
make
| > sure Virtual Private Networking (VPN) is selected in the Services
| > Configuration page. And make sure you have typed the public FQDN of
the
| > SBS
| > server on the Web Server Certificate page.
| > 2. Run Remote Access Wizard in Server Management\Internet and
| > E-mail\Configure Remote Access, and select VPN access in the Remote
Access
| > Method page. After finishing this wizard, RRAS is configured to allow
| > inbound VPN access, and it can assign IP addresses to the VPN clients
by
| > using DHCP.
| >
| > Note: When we run the remote access wizard to set up the VPN service,
we
| > need to input the public IP address or the public FQDN of the SBS
server.
| > We need to make sure that the address can be accessed from the
internet.
| >
| > 3. On the VPN client, go to https://publicFQDN/remote, clear I'm using
a
| > public or shared computer, log in and download Connection Manager.
| > 4. Install Connection Manager on the VPN client.
| > 5. Is there a hardware router installed in front of the SBS server? If
so,
| > ensure that the port forwarding for TCP 1723 and GRE port (protocol
number
| > 47) are opened. PPTP VPN is negotiating a connection on TCP port 1723
and
| > send data to and from the PPTP server using the GRE protocol (IP
Protocol
| > 47, 0x2F if you are looking in Network Monitor). You should open port
1723
| > on the router and also make sure IP Protocol 47 is allowed.
| >
| > For detailed information, you can refer to the following KB articles:
| >
| > 323381 How to Allow Remote Users to Access Your Network in Windows
Server
| > 2003
| > http://support.microsoft.com/?id=323381
| >
| > 323441 How To Install and Configure a Virtual Private Network Server
in
| > Windows
| > http://support.microsoft.com/?id=323441
| >
| > If you still cannot establish the VPN connection, please help me to
| > collect
| > the following information for troubleshooting the problem:
| >
| > 1. What's the VPN server name you entered when you ran the Remote
Access
| > Wizard? Can you ping that name from the external client? The VPN
server
| > name should be the public FQDN or the public IP address of the SBS
server.
| > 2. Can you create VPN to SBS through new connection wizard on My
Network
| > Places on external client?
| > 3. Get the IPCONFIG /ALL results when Creating VPN on client computer
and
| > SBS.
| > 4. Can you ping the server name and IP from the problematic client?
| > 5. Would you please post a screen shot to newsgroup?
| >
| > I am appreciated your time and I look forward to hearing from you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have
issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you
check
| > the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although
we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
| > doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > --------------------
| > | From: "Robert Craig" <craigrobert@xxxxxxx>
| > | Subject: VPN Client
| > | Date: Tue, 7 Feb 2006 10:31:05 -0800
| > | | Newsgroups: microsoft.public.windows.server.sbs
| > | |
| > | I'd say about 9 out of 10 tries to VPN to my server from another
| > location
| > | fails. The connection just sits at verifying username and password
and
| > | eventually gives up. Sometimes the error is the remote computer did
not
| > | respond, the other is the server and client could not agree on a
PPTP
| > | connection. What could be wrong?
| > |
| > | Using SBS2003
| > |
| > | Thanks!
| > |
| > | Robert
| > |
| > |
| > |
| >
|
|
|



.

Relevant Pages

  • Re: VPN disconnection
    ... server's external NIC and try to create to create VPN ... down if the problem is caused by the server itself. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN, mapped drives
    ... cannot access the shares on the SBS Server thru VPN ... Netbios over Tcpip was disabled on VPN NIC ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN PPTP problem
    ... the "Allow VPN client traffic to ISA Server" rule. ... we can make the SBS work in single NIC. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN PPTP problem
    ... the "Allow VPN client traffic to ISA Server" rule. ... we can make the SBS work in single NIC. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW vs. VPN
    ... I don't particularly want to have the server totally exposed ... >>> the SBS port forwarding) is not forwarding! ... but no VPN authentication. ... >> What isn't happening is the data transfer on protocol 47. ...
    (microsoft.public.windows.server.sbs)