Re: PC specific vpn issues

You said you could run pptpclnt/pptpsrv successfully from the client...but just to be clear, pptpsrv needs to be run on the SERVER. Otherwise you only verified GRE over the loopback interface. Not very effective at all.

Secondly, the pptp ping tools (unfortunately named) only verify GRE. They do not verify TCP 1723. The fact that other machines are working and the same account works on other machines tells me a pretty blatant communications issue with the client, not the server. Also, if communications were working, but authentication was failing (mismatched encryption MS-CHAP vs MS-CHAPv2, for example) then the error code would change. That would no longer be a 721. So the failure is very early in the PPTP negotiation attempt. That limits the scope of where the problem can lie.

Sadly that also means this isn't an SBS issue, so I don't think this is the best group to help you. You can try in the XP group to get more ideas, otherwise I'd say if you can't pinpoint what is blocking packets, time to re-image the machine.

Good luck,

-Cliff

"J" <japhyrider2005@xxxxxxxxx> wrote in message news:b4ceb358-bc68-4eb1-b199-41201dd69564@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,
I have 10 computers that CAN connect to my SBS 2003 pptp VPN.
I have 1 user who cannot. He is running XP sp2. He gets 721 error.
I can run pptpclnt / pptpsrv successfully from this client, so GRE is
not the issue.

(Dell server / 2 NICs; 1 NIC connected to local network; 1 NIC
connected to public network.
I have rerun CEICW, reinstalled RAS on the server.

I have msconfiged and booted very clean on his PC (no AV, firewall,
defender, etc)

I tried connecting to another company's SBS vpn and have same issue.

I can connect to vpn with his account on another computer.

It fails with any account I try on his computer.

So, it has to be computer specific.

The fact the pptpclnt / pptpsrv succeeded really has me stumped.
Any ideas? Are there any alternative vpn clients that run under xp
and connect to a sbs 2003 vpn?
thanks

.

Relevant Pages

  • Re: ISA/VPN/Router
    ... I don't know how to enable IP GRE 47. ... after I forward port 47 to the SBS. ... I understand that when you try to establish a VPN ... >> a PPTP client and a PPTP server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Error 720 connecting to server via VPN
    ... A connection between the VPN server and the VPN client XXX.110.88.173 has ... VPN client is not configured to allow Generic Routing Encapsulation (GRE) ... Should I setup a firewall rules to allow port 47? ...
    (microsoft.public.windows.server.sbs)
  • Re: Error 720 connecting to server via VPN
    ... A connection between the VPN server and the VPN client XXX.110.88.173 has ... VPN client is not configured to allow Generic Routing Encapsulation (GRE) ... Should I setup a firewall rules to allow port 47? ...
    (microsoft.public.windows.server.sbs)
  • Re: PC specific vpn issues
    ... pptpsrv needs to be run on the SERVER. ... the pptp ping tools only verify GRE. ... I have 10 computers that CAN connect to my SBS 2003 pptp VPN. ... I can run pptpclnt / pptpsrv successfully from this client, ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Disconnection
    ... 1- Replace the router with another router from different model/brand. ... also known as VPN pass.-through very well. ... Pass.trough traffic (or GRE or Protocol 47 traffic). ... you to make this setting forward the traffic to your server. ...
    (microsoft.public.windows.server.sbs)
Loading