Re: VPN Error 800 - Again
- From: Jim Behning SBS MVP <jimbehning@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 21 Mar 2007 22:21:54 GMT
Did you run the Configure Remote Access wizard after the Internet
wizard? Is the cable service a business class that does nto block
vpns?
On Wed, 21 Mar 2007 06:03:10 -0700, gbchriste
<gbchriste@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I'll try your internatl and NIC test if I can't figure out fix this remotely.
but getting physically to the server, while not impossible, is rather
inconvenient - scheduling wise.
The setup is SBS 2003 R2 with ISA 2004. There is no router in front of the
SBS. It is connected directly to a Cox High Speed cable service modem with
the public IP on the external NIC. Ran the Internet and Remote Access
wizards. Fully qualified public domain name is correct and setup in the
connection manager. ISA VPN status page shows remote access enabled.
Inbound connection attempts on port 1723 appear in the ISA monitor log, but
with Action of Connection Failed.
Setup a vanilla VPN connection in Network Connections. Same result.
Ran the PPTP ping test. First stopped the RRAS service to allow pptpsrv.exe
to bind to 1723. The pptpclnt.exe tool returned the following error:
Error 10061
WSAECONNREFUSED: Connection refused
Which according to the WINSOCK error logs indicates the target machine (my
SBS in this case) is actively refusing the connection.
The PPTP Ping test was run from a laptop in my home, connected to Cox High
Speed cable service via a Linksys wireless router. I opened port 1723 on my
home router, thinking perhaps the SBS needed to establish a reverse path on
the same route.
No luck.
"Jim Behning SBS MVP" wrote:
Try a vpn connection inside the network first. If it works then you
know the server is good internally. I then hook up a little switch to
the lan port of your internet router. This assumes two nic setup. I
give my laptop an ip one number up from the server external nic. If it
still works you know the server is not the issue because it answers
from both the internal and external nics. If you have just one nic and
it ansers vpn requests then you have eliminted the SBS. All you have
left is the router at that office that the SBS is hooked up to or
maybe at the remote location. Maybe it is not forwarding thngs
correctly.
I test from home. If I can vpn to one site but not another from home I
know it is the site. Some routers are not so good about vpn but I have
not had a vpn issue with a router in 5 years.
You neglected to mention one or two nics. ISA 2000 or ISA 2004. Brand
of router at the site.
On Tue, 20 Mar 2007 21:23:10 -0700, gbchriste
<gbchriste@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I've looked at many of the past posts concerning VPN error 800 but still not
finding an answer. I ran the Internet Connection Wizard and the Remote
Access Wizard. Downloaded the connection manager. Getting error 800 on
attempt to connect to the SBS server via VPN from an external client. I know
I'm getting out from my client network because I can see the port 1723
connection attempt in the ISA monitor. But action is Failed Connection
Attempt. Attempting to connect with the domain administrator account, which
is in Mobile Users, so privilege should not be a problem. Client wants to
set up a remote branch office but I can't get VPN working. Never had this
stinking problem on SBS 2000!
- References:
- Re: VPN Error 800 - Again
- From: Jim Behning SBS MVP
- Re: VPN Error 800 - Again
- From: gbchriste
- Re: VPN Error 800 - Again
- Prev by Date: Re: Connections to shared files are dropping out - repost
- Next by Date: Re: Random Stop Error - Critical Issue
- Previous by thread: Re: VPN Error 800 - Again
- Next by thread: Re: VPN Error 800 - Again
- Index(es):
Relevant Pages
|
