Re: VPN Error 778

Merv,

Finally had a chance to complete all of this and try it from a port on my
net facing router and this still didn't work. I also tinkered with some of
the authentication and encryption settings on RAS. In particular taking it
down to no encryption and no authentication and still couldn't get it to
work, although the error messages changed from 778 to 736 and 741. Is there
any way to just reinstall RRAS?

"Merv Porter [SBS-MVP]" wrote:

Try disabling RRAS using the RRAS console. Then re-run CEICW, select
firewall, select services (including VPN), create the Web Server
certificate, finish CEICW. Then run the Remote Access Wizard for VPN setup.
Then try to VPN from a port on the router.

Does this diagram show your physical setup? (where is your Access Point in
relation to the switch?)
http://www.smallbizserver.net/tabid/266/articleType/ArticleView/articleId/74/Default.aspx

--
Merv Porter [SBS-MVP]
============================


"donmc" <donmc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:53825D99-3673-4B51-9750-45E6D9F10DF4@xxxxxxxxxxxxxxxx
Merv, Jim,

Still not working :-(
Followed the instructions from the Google post. Found that my method of
authentication wasn't defined at all. Changed it to Windows. Ran the
Remote
Access setup wizard and tried to connect from my lan using a desktop and
wireless laptop. No joy. Have not tried it from outside the lan.

Jim,

I'm running EZtrust antivirus on the server, but there are no firewalls
other than ISA running on the server and the answer to all your other
questions is yes.

In searching Google this sounded like a certificate problem, and after
running the remote access wizard I thought it would be cleared up, but it
did
not.

"Jim Behning" wrote:

You are not running any antivirus on the server?

You have reviewed all the services on the server and you do not see
any other firewall services started?

A google search shows that 778 error is kind of rare.
http://www.pcreview.co.uk/forums/thread-1574610.php

A wired workstation is attached to the same switch as the internal nic
of the server? It has an ip given out by the SBS? When you try to vpn
the server using the inernal name like MYSBS you get the 778 error?

On Wed, 11 Oct 2006 07:45:03 -0700, donmc
<donmc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Merv, Jim,

Thanks again. Removed the WINS entry on both NICS (not even sure how it
got
there). Went to the external NIC router and tried to VPN in and got the
same
778 error. Regarding the firewall question, I'm running ISA Server 2004
and
all computers on the network are running the firewall client. The XPSP2
built
in firewall is disabled.

"Merv Porter [SBS-MVP]" wrote:

Yep. Unless it's a typo, the WINS entry is wrong on both NICs. :-)

Don, is the SBS server handling the DHCP service for the network? If
not,
turn off DHCP service on other device (probably the Access point) and
re-run
CEICW to let SBS handle DHCP.

Then plug a laptop into a free port on the router, give it a static IP
address in the 192.168.15.x range and a gateway of the router
(192.168.15.1)
and then try to VPN into the SBS server. This will simulate VPNing in
from
an external source while taking the router out of the equation.

Internet
|
Router (attach laptop to free port on router)
|
SBS External NIC
||
SBS Internal NIC
|
Access Point
| | | |
Workstations (wired and wireless)

--
Merv Porter [SBS-MVP]
============================

"Jim Behning" <jimbehning@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:v7qpi2tpkn0lhgc0735ha09kore4j8ussi@xxxxxxxxxx

The WINS is wrong on the external nic. It should either be blank or
pointed to the internal ip of the server nic.

I have not followed the thread to well. Is there any mention of
Windows Firewall or any third party antivirus blocking stuff?

On Tue, 10 Oct 2006 19:49:01 -0700, donmc
<donmc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Merv,

Thanks for your help. Trying it from multiple workstations. One is a
laptop
using a wireless connection, one a desktop using an ethernet
connection.
Both
going into a wireless access point (ip:192.168.1.1) connecting to my
server.
ipconfig/all below:
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : focusedserver1
Primary Dns Suffix . . . . . . . : FocusedEnergyLLC.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : FocusedEnergyLLC.local

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 S Server
Adapter
Physical Address. . . . . . . . . : 00-0E-0C-83-60-52
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.19
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.1.19
Primary WINS Server . . . . . . . : 192.168.15.19

Ethernet adapter Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-14-22-0B-7F-74
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.15.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.15.1
DNS Servers . . . . . . . . . . . : 192.168.1.19
Primary WINS Server . . . . . . . : 192.168.15.19
NetBIOS over Tcpip. . . . . . . . : Disabled


"Merv Porter [SBS-MVP]" wrote:

Are you using a wireless connection at the SBS server or at the
remote
workstation?

--
Merv Porter [SBS-MVP]
============================

"donmc" <donmc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3B9F3FCA-5231-48BB-A6AF-D22E27DC2267@xxxxxxxxxxxxxxxx
Correct, PPTP through to the SBS Server and yes using "Typical"
with
require
data encryption.

"Merv Porter [SBS-MVP]" wrote:

I assume your using PPTP through to the SBS server and not
terminating
the
VPN at your router. In the VPN connectoid, under the Security
(tab),
in
Security Options, are you using "Typical" with require data
Encryption?

--
Merv Porter [SBS-MVP]
============================

"donmc" <donmc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F4732A2A-BB8C-4F59-97DE-A6AAE4D6F057@xxxxxxxxxxxxxxxx
Thanks for the quick response. Tried shutting down the
service and
then
trying to access the server from multiple points on my lan
and it
still
didn't work.

"heartthrob669@xxxxxxxxx" wrote:

First try doing a VPN to the server itself.. if ur still not
able
to
do
a VPN and ur getting the same error message. Try stopping
the
License
Loging Service and then do a VPN .. this shud work ..

donmc wrote:
Can't seem to get VPN to work from my lan or outside of
it. I've
rerun
the
CEICW and the Configure Remote Access wizards and also
downloaded
the
connection manager from RWW. Keep getting the error.















.

Relevant Pages

  • Re: VPN - desparate housewife part 2
    ... Further to your reply and further study of the Router guide states a VPN ... All traffic is then directed to Server. ... > connection from a LAN client to your VPN server using its LAN IP. ...
    (microsoft.public.win2000.ras_routing)
  • RE: VPN connection not passing the password auth stage.
    ... I understand that when you try to establish a VPN ... connection, the connection fails in the process of verifying the ... PPTP client and a PPTP server. ... The router must be able to pass Generic ...
    (microsoft.public.windows.server.sbs)
  • Re: static routing
    ... Connections work going out from inside the router, ... I'll have to remove the router and connect the server directly to the cable ... A static route has been added that matches the subnet ...
    (microsoft.public.windows.server.networking)
  • RE: VPN issue on SBS2003
    ... I understand that you encountered VPN connection issue when you use VPN to ... Internet clients or VPN to external VPN Server from SBS Client computers? ... Configure E-mail and Internet Connection Wizard ... Total GRE packets sent = 1 ...
    (microsoft.public.windows.server.sbs)
  • Re: Please Help Site-To-Site without ISA
    ... A VPN connection does not really connect to any NIC. ... connection and at the demand-dial interface for a router to router ... or am I stuck with the NIC that is the VPN server? ...
    (microsoft.public.windows.server.networking)
Loading