That is done. Sorry I forgot to mention it.
Main Topics
Browse All Topics
Loading Advertisement...
Question
SBS 2003 VPN Issue
I have a SBS2003 machine that I recently moved to a new office. This used to be behind a Linksys WRT54G, but since I recently added a VOIP phone system, I needed a router with QoS. Because of this, I moved to a Linksys RV042 instead. My SBS server is also my VPN server and this worked fine behind the old router. Now that I've moved to the new router, my VPN connections are timing out. I have TCP port 1723 forwarded to my SBS server and am not seeing any drops in the router log. Even with my SBS box in the DMZ, I still can't connect. My XP VPN client gets stuck on "Verifying username and password" and eventually returns a 721 error. I do get entries in my SBS System log saying that "The user connected to port VPN5-4 has been disconnected because the authentication process did not complete within the required amount of time."
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Subscribe now for full access to Experts Exchange and get
Instant Access to this Solution
- Plus...
- 30 Day FREE access, no risk, no obligation
- Collaborate with the world's top tech experts
- Unlimited access to our exclusive solution database
- Never be left without tech help again
Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.
- "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
- "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
- "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.
See what Experts Exchange can do for you.
Got a question?
We've got the answer.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
Need individual assistance?
Our experts are ready to help.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Want to learn from the best?
Read articles from industry experts.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Working on a long term project?
Store your work and research.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Trusted by the world's most respected brands.
Faithfully serving IT professionals since 1996.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Free Tech Articles
-
WARNING: 5 Reasons why you should NEVER fix a computer for free.
It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
-
SCCM OSD Basic troubleshooting
SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
-
Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
-
Create a Win7 Gadget
This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
-
Outlook continually prompting for username and password
There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
-
Backup Exchange 2010 Information Store using Windows Backup
There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...
Cloud Class Webinars
- Avoiding Bugs in Microsoft Access
Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
- Top 10 Best New Features in Visio 2010
Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
- IT Consultant Business Secrets Revealed
Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
- Disaster Recovery and Business Continuity
Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
- Organize Your Visio Diagrams with Containers and Lists
Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
- How to Us Objects, Properties, Events and Methods in Microsoft Access
Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Answers
You aren't connecting to the RV042 as the VPN endpoint so you should NOT have anything enabled or configured on that regarding VPN.
Since installing this new router, did you set the LAN IP address the same as you had in the WRT54G?
Have you rerun both the Configure Email and Internet Connection Wizard (CEICW -- linked as "Connect to the Internet on the To-Do list in the Server Management Console) and the Configure Remote Access Wizard?
Can you connect to the SBS via VPN from a LAN workstation?
Jeff
TechSoEasy
returns a 721<- This is a GRE pass-through issue. You should call Linksys support. If you recently bought this router, their support is free. Linksys is incredibly inconsistent on which routers allow GRE pass-through and which don't. My personal experience is that a lot (certainly not all) of the routers they market as "VPN" routers have trouble with GRE pass-through. You maybe just missing a simple setting. But since the support call is free, why not try it.
@TechSoEasy:
That's what I thought, I just wanted to make sure that I didn't miss something.
Yes, all of the IIP information is the same, only the router has changed.
Yes, I re-ran all of the wizards.
Yes, I just tested it and a PC at the office can connect via VPN to the server by using the internal hostname of the server, so I know that my SBS is configured correctly.
@sguinn100:
I called tech support last night and was on the phone with them for about 2 hours. They had me trying all of the basic things - most recent firmware, reflashing, resetting, blah blah blah. When I finally got escalated to the next level, they told me that it sounds like the router was bad and that I should return it and get a replacement. As far as I'm concerned, that's a BS solution. It was if I was the first person calling them about GRE being blocked. Because I was so frustrated and didn't want to deal with them anymore, I thought I'd post here and see if I could get lucky.
If you search Google for RV042 and GRE, VPN, PPTP, etc, you'll find a lot of folks have problems with gettting this to work. I've used RV042's for a number of BS installations and haven't yet experienced any issue with GRE... but it does seem as though the problem is with that router.
You might want to try reverting the firmware back to a previous version. You can download the previous version from here: ftp://ftp.linksys.com/pub/
Jeff
TechSoEasy
The RV042 should have no problem forwarding GRE. It's a good unit. I have a few even using the latest firmware 1.3.82 and no problems there either.
-It is possible it is a bad router.
-Make sure under VPN | PPTP Server | the box "enable PPTP server is un-checked. That is for setting up the router, rather than the server to be the VPN endpoint and will block it from passing the PPTP traffic
-You say you added a VoIP system. Has this resulted in any equipment being placed between the modem and the RV042, between the RV042 and the server, or a new modem installed? The RV042 must be assigned a true public IP and not have anything between it and the server, other than switches/hubs.
The PPTP server on the RV042 is not enabled, so that shouldn't isn't the issue. As for the VOIP system, it's only an additional server and some IP phones - nothing in front of the router. However, now that you mention it, the modem is new. It's a Motorola unit that from what I remember has a built in 4-port hub/switch. I will have to contact my cable provider's technical support just to rule this out as a possible issue.
>>"has a built in 4-port hub/switch"
If so it is likely a combined modem and router. It will need to be put in bridge mode. You will be able to tell by checking the WAN IP of the RV042. If the modem is a combo unit (i.e. performing NAT) the RV042 will probably have a private IP; 192.168.x.x, 10.x.x.x, or 172.16-31.x.x
Which model modem is it?
>>"The RV042 has a static public IP address "
Modem is probably not performing NAT. If it is a combined unit it may already be in bridge mode.
Wouldn't hurt to test the forwarding by logging onto the SBS and going to http://www.canyouseeme.org
This will not test for GRE but will for PPTP. This means the port forwarding is correct, and I assume it is, as you would be getting a different error than 721.
However, the reason I was asking is it is possible to forward PPTP traffic from a combo router to the RV042, and then to the SBS. This works for PPTP but not GRE, as it doesn't like dual NAT devices. If the RV042 has a public IP then this is likely not the case.
Though it is not likely, especially with a Motorola and the fact that it is new, a few modems do not support GRE.
If you have a new modem, do you have a new ISP? Several ISP's do not support GRE, Com cast in many areas is one I have come across lately.
One other thought; does the VoIP system use a VPN? If IPSec that is fine, but if PPTP it can be a problem. Also VoIP often requires a large range of ports be forwarded to the VoIP server. Any chance of a forwarding rule overlapping with your PPTP VPN? They sometime forward blocks of ports such as 1024 to 2000.
So I used www.canyouseeme.org to test port 1723. It was able to connect and I was also able to telnet from my work PC on 1723, so I know that the port is being forwarded. However, I don't think I have any way of knowing if 1723 is going to the RV042 or the server but I'm going to go with the assumption that I am getting to the server and GRE is being blocked.
After calling my ISP's tech support, I found out that the modem is actually an Ambit U10C020 and they said that they do not do any blocking or filtering on this device.
The VOIP system does not use VPN, but I checked my forwarded ports anyway just to be sure that I didn't overlap anything.
The one thing that I might try next is to (temporarily) put my SBS box directly into the cable modem and see if I can VPN in then. If that works, then I know with 100% certainty that the router is actually causing my issue.
>>" I don't think I have any way of knowing if 1723 is going to the RV042 or the server "
CanYouSeeMe should have confirmed that by testing from the server. Telnet basically just tells you it is not being blocked, but you don't know if it is forwarded.
Your Ambit U10C020 can be a VPN endpoint device. Make sure any PPTP related options for that are disabled, and see if there is a PPTP pass-through or enable GRE option within the unit. Can you access it to configure?
Correct me if I'm wrong, but don't they both just tell me if the port is being forwarded? CanYouSeeMe said that it wasn't blocked and telnet didn't time out, but I don't really know if the router was accepting those calls or my SBS machine.
Unfortunately, I don't have access to the Ambit unit, which is why I'd like to hook the server up to it directly. I've already determined that my SBS machine is properly configured, so that would be one way to rule out the router. If it doesn't work connected right to the modem, then I've found my cause.
>>"Correct me if I'm wrong, but don't they both just tell me if the port is being forwarded? "
Well, I didn't think that was the case with Canyouseeme, but out of curiosity, I just tested it from a few PC's and you are quite right. Sorry about that.
Hooking the server directly to the Ambit, I agree is a good test. Careful, the windows firewall should be enabled, or if you could access the Ambit unit it appears it could be put in NAT mode.
On that note; I understand you bought the RV042 for QOS, but is this just for the LAN side? VoIP is best used with QOS, but as soon as the packet leaves your LAN you have no control over that. You might be better with a QOS switch for LAN use and bypass the RV042 altogether and configure the Ambit firewall. It is a combined router and modem unit, looking at the specs.
3 Ways to Join
Business Accounts
- Perfect for organizations
- Multiple users
- Save over 36%
- Create a Business Account
Answer for Membership
- Earn free access
- Showcase your knowledge
- No credit card required
- Sign Up to Answer
Loading Advertisement...
by: TechSoEasyPosted on 2007-06-25 at 18:42:36ID: 19360482
Make sure that PPTP Passthrough is enabled on the RV042.
Jeff
TechSoEasy