Re: VPN drops

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hmm...

After a bit more research, I'm wondering whether or not the Draytek does
support multi-pass.. It certainly does allow the tunnels to be created
and data to pass, but I wonder if it gets confused..

Anyway, I've now figured out how to lock the ethernet ports down to MAC
specific laptops, so I'm going to setup a LAN-LAN connection instead.

I would be interested though in finding out which DSL routers do support
multi-pass, are there any lists?

I found a "termination cause" column in the SBS logs, that suggests the
SBS server thinks the far end disconnected, so I dont think I'll see
much more..

A.

Adrian Marsh (NNTP) wrote:
Its a Draytek 2800 on both ends, but I use VPN on the SBS2003 R1 server
as we reached the VPN limits of the Draytek.

The Draytek does support multi-vpn client passthrough, and thats fine
(I've seen 3 users online at the same time from the same site). Whats
odd is why they keep getting kicked off.

I was hoping that theres some extra logging in the SBS server that I can
turn on to find out why this is... and most importantly, does the SBS
server think its a graceful disconnect, or that the users just
"disappear"..

ndohyycsqotchk@xxxxxxxxxxxxxx wrote:
On Mar 23, 8:43 am, "Adrian Marsh (NNTP)"
<adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
Hi All,

I've several XP users at a remote site, who VPN (PPTP) to the SBS
server.

Generally, I'm happy with the VPN features of the SBS2003 R1 server
(though I'd still like to get IPSEC with UDP-encapsulation working
instead of PPTP).

However these remote users are complaining that their PPTP tunnels keep
dropping.

I can't do site-site VPN as its not a completely secured location.

But I do need to diagnose more about why the PPTP sessions are dropping.

What are my options for diagnosing this more (either from the servers
view, and/or the XP client itself??)

I use IAS log viewer to interpret the current VPN server logs, and all
that shows is that the user connected ok (not why they disconnected).

I'm monitoring simple ICMP pings to their DSL router, which shows that
the internet connection stays alive, and our ISP tells me that they see
constant days of uptime, so I've ruled out internet connectivity as an
issue.

Looking at the IAS logs, I see that connection times vary from <1min to
<1 hour..

Thanks,

Adrian

What make/model of router do you have? Some routers don't support
multiple concurrent PPTP VPN sessions to the same host.

.

Relevant Pages

  • Re: Bizzare ISA2004 VPN Issues, Please help
    ... If you use the Server Publish rule to publish an internal PPTP server to the internet, a socket on TCP 1723 port of ISA external ... you could still setup PPTP server on ISA and let it listen on TCP 1723. ... | - I disabled VPN client access from within ISA2004. ...
    (microsoft.public.isa)
  • Re: VPN Drops every 9 minutes
    ... Her office is running server 2003 for remote access behind a sonicwall ... Is the PPTP server terminated in the Sonicwall or in the Windoze 2003 ... Same thing the vpn drops every 9 minutes. ... "Event Viewer" for clues as to which end initiated the disconnects and ...
    (alt.internet.wireless)
  • Re: VPN Drops every 9 minutes
    ... Her office is running server 2003 for remote access behind a sonicwall ... Is the PPTP server terminated in the Sonicwall or in the Windoze 2003 ... Same thing the vpn drops every 9 minutes. ... "Event Viewer" for clues as to which end initiated the disconnects and ...
    (alt.internet.wireless)
  • Re: Bizzare ISA2004 VPN Issues, Please help
    ... Rebooted the server. ... I then manually opened RRAS, configured it to accept PPTP VPN connections. ...
    (microsoft.public.isa)
  • Re: Bizzare ISA2004 VPN Issues, Please help
    ... On isaserver.org you didn't mention that you were already binding the PPTP ... you can't publish a PPTP server and also terminate a PPTP connection on ... - I then manually opened RRAS, configured it to accept PPTP VPN ...
    (microsoft.public.isa)