Re: PPTP Misery

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Thanks for coming back so quickly. I think I'm doing a bad job of explaining
this but to make it absolutely clear:

Have carried out the following from three separate remote locations, two via
router and one via DSL modem. Each time using at least two separate PCs that
have never been near the domain & two PCs that were set up on the domain via
SBS wizards. The latter have been taken off and then put back on, then off
again for the tests

a) PCs that were originally on domain will not PPTP VPN despite no Firewall
and advised registry fixes. All of the domain notebooks had previously VPN-ed
perfectly well until some undetermined point in time about a month ago
b) Any other PC will still PPTP VPN without any issue at all.

All routers are working fine and have necessary GRE protocol and ports.
Internal subnets happen to be the same and changing it doesn't affect either
point 1 or 2 above.

Surely it MUST be a local machine registry issue left over from the domain
profile/policy? Any other PC perfectly fine. Totally agree it appears to be
GRE though. It's doing my head in..............

To answer your specific points:
1. Current location router/DHCP set-up provides 192.168.1.65 with
255.255.255.0 and server end has two NIC scenario with router as follows -
Server LAN 192.168.16.2 (255.255.255.0) Server WAN 10.0.0.2 (255.0.0.0)
Router LAN 10.0.0.1 (Gateway) with external IP on other side.
2. Yes.
3. No (but non-domain guest machine can).
4. Don't need to (see above).
5. Don't need to (see above).

I want to return to default PPTP without having to do anything drastic to
the machines. Hence my simplified question. Thanks again in advance for any
help that may be forthcoming.

"Leythos" wrote:

In article <483FA895-9FDE-44DD-973E-A4AABFF52B64@xxxxxxxxxxxxx>,
SimonUK@xxxxxxxxxxxxxxxxxxxxxxxxx says...
Is there a way to reload the default PPTP registry profile in a Windows XP
Pro machine?

I appreciate that policy might change things back but I want to force one of
the domain PCs (the one I'm using is now off the domain and in at Admin M/C
level) to connect - just to prove I'm heading in right direction. Tinkering
with various PPTP registry settings has not solved the problem. Any ideas?
All suggestions welcome if I'm way off track.

Remove the workstation from the domain, make it a member of a workgroup,
reboot it again, then join it back to the domain.

Also, 721 is a clear indication of a GRE problem.

There can be several issues with 721 that you need to look into if
you've not already looked into them:

1) Is the remote computer on a different subnet than the LAN/WAN of the
SBS box?

2) Is the remote computer setup for PPTP Pass-Through on the router that
it's connected to (at the remote end)?

3) Can the problem computer PPTP when connected to the SBS LAN?

4) Have you reset the remote computers router to factory defaults and
tried it again?

5) Have you checked the vendors websites (support) for GRE fixes/hacks
to remove GRE errors?

--

spam999free@xxxxxxxxxx
remove 999 in order to email me

.



Relevant Pages

  • Re: PPTP through NAT device
    ... Keep in mind you need both TCP Port 1723 open and the router must pass GRE ... fact pass GRE Protocol 47 traffic. ... If you can't get PPTP VPN to work through your current router you might... ...
    (microsoft.public.windowsxp.network_web)
  • Re: Howto Configure SBS 2003 R2 Broadband/DSL VPN
    ... My 3Com Firewall makes no mention of GRE protocol 47 so, whilst I have configured the Virtual Server for PPTP pass through on port 1723, is there a chance that the GRE 47 matter is the problem? ... I'd trust an XP wizard configuration, as I like to see what I'm doing. ... Are you able to configure the 3Com router to log the PPTP forwarding? ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Client Access
    ... | the router, and then managed to search the internet to ... | little tweak to actually allow the GRE protocol through. ... At first the server failed, ... |>>setting specifically for PPTP. ...
    (microsoft.public.windows.server.sbs)
  • Re: W2K VPN Setup
    ... GRE by name or by IP protocol, some use PPTP pass-through or even just VPN ... because it is not a port. ... >> your router to your server, you extend the tunnel endpoint to the server. ...
    (microsoft.public.win2000.ras_routing)
  • Re: DI-804HV, DI-808HV, FVS318
    ... > Leythos wrote: ... > I think what I need is PPTP since I want a remote computer to be able to ... > VPN into the router and pick up a LAN IP address. ... I don't know if the 318 will act as a PPTP end-point, ...
    (comp.security.firewalls)