RE: VPN - user credentials problem

Thanks Crina

Steps 1 to 4 re-done (I picked these up from another post on the user
group). I have 1723 on the router open but plesae can you explain what you
mean by "GRE port (protocol number 47)".

Thanks

""Crina Li"" wrote:

Hi Stuart,

Thank you for posting in the SBS Newsgroup.

I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

From your description, I understand that you want to configure VPN on SBS.
If I have misunderstood your concern, please do not hesitate to let me know.

Firstly please check if you have allowed GRE port (protocol number 47) on
your router. Then please try to follow the steps below to reconfigure VPN
access on SBS:

1. Run CEICW, follow the wizard and select Enable firewall and then make
sure Virtual Private Networking (VPN) is selected in the Services
Configuration page. And make sure you have typed the public FQDN of the SBS
server on the Web Server Certificate page.
2. Run Remote Access Wizard in Server Management\Internet and
E-mail\Configure Remote Access, and select VPN access in the Remote Access
Method page. After finishing this wizard, RRAS is configured to allow
inbound VPN access, and it can assign IP addresses to the VPN clients by
using DHCP.

Note: When we run the remote access wizard to set up the VPN service, we
need to input the public IP address or the public FQDN of the SBS server.
We need to make sure that the address can be accessed from the internet.

3. On the VPN client, go to https://publicFQDN/remote, clear I'm using a
public or shared computer, log in and download Connection Manager.
4. Install Connection Manager on the VPN client.
5. Is there a hardware router installed in front of the SBS server? If so,
ensure that the port forwarding for TCP 1723 and GRE port (protocol number
47) are opened. PPTP VPN is negotiating a connection on TCP port 1723 and
send data to and from the PPTP server using the GRE protocol (IP Protocol
47, 0x2F if you are looking in Network Monitor). You should open port 1723
on the router and also make sure IP Protocol 47 is allowed.

If the issue still occurs, would you please help me collect the following
information?

1. Is everything OK if you manually create a VPN connection to the SBS
server? To do so, see:

305550How to configure a VPN connection to your corporate network in
Windows XP Professional
http://support.microsoft.com/default.aspx?scid=kb;EN-US;305550

314076 How to configure a connection to a virtual private network (VPN) in
http://support.microsoft.com/?id=314076

2. What is the detailed error message?
3. Get the IPCONFIG /ALL results when creating VPN on remote client and SBS.

Related information:

323441 How To Install and Configure a Virtual Private Network Server in
Windows
http://support.microsoft.com/?id=323441

305550 How to configure a VPN connection to your corporate network in
Windows
http://support.microsoft.com/?id=305550

320697 HOW TO: Turn On and Configure Inbound VPN Access in Small Business
http://support.microsoft.com/?id=320697

I appreciate your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: VPN - user credentials problem
| thread-index: Aca9+Ag8npZPBPeyQF60xm9oXja+Tg==
| X-WBNR-Posting-Host: 217.34.44.202
| From: =?Utf-8?B?U3R1YXJ0?= <Stuart@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: VPN - user credentials problem
| Date: Sat, 12 Aug 2006 03:14:01 -0700
| Lines: 10
| Message-ID: <73DFDC3A-5467-413A-9022-2FBD5717113B@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:289124
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Running SBS2003 and XP Pro clients. We had a router failure and have
replaced
| it and opened the correct ports (1723). Can access all SBS services from
the
| clients as before except VPN.
|
| No users are able to log on to VPN - it fails them on their credentials.
| I've checked everything both sides and can't see any changes. I've
| reinstalled the SBS connector on the client. I used the same type of
router
| before successfully nut is there anything else I need to let through.
|
| Thanks
|


.

Relevant Pages

  • Re: VPN still not working :( Ports for VPN?
    ... >> For VPN you need TCP port 1723 and the Pass Through protocol also known ... >>> have to setup a VPN, I had a dlink 504 router and I opened port 1723 on ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: VPN Connection problem
    ... I just heard from the router mfg. ... not forward protocol 47 throught the firewall. ... 47.This port is used for incoming PPTP VPN connection) are needed to open ...
    (microsoft.public.windows.server.sbs)
  • Re: Connecting to resources over a SBS 2003 VPN
    ... a quick look but can't see any mention of your router hardware. ... One of these details is how many simultaneous VPN connections can be maintained. ... also protocol 47. ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Connection problem
    ... 1.)I am checking with the manufacturer of the router about protocol 47. ... This is the way I make any VPN conntection. ... 47.This port is used for incoming PPTP VPN connection) are needed to open ...
    (microsoft.public.windows.server.sbs)
  • Re: Error 800
    ... Ensure that GRE is not blocked by the router. ... GRE is a protocol, just as TCP is a protocol. ... > After I thought I configured my VPN server according to A ...
    (microsoft.public.win2000.ras_routing)