Here is a link that may help you alos
http://support.microsoft.c
JEB
Main Topics
Browse All TopicsHello all,
I have windows 2003 server, which has got routing and remote access service enabled. I have enabled this service by selecting custom option, while installing.
I have done port forwarding on port 1723 and 47 both tcp on my router to the server. But I can't connect to the vpn software, I have just enabled security only MS-CHAP V2(both client and server side).
Whenever I tried to connect it says that, Error 678: the remote computer didnot respond. etc....
I have given permission on the user account for remote dial-in in active directory users and computers.
Is there any step I am doing wrong? Can someone please advise ASAP, as this is very urgent task.
many thanks in advance.
Krishna.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Here is a link that may help you alos
http://support.microsoft.c
JEB
Configuration is very simple I did, enable RAS, and select custom---> selected VPN only--> it gave direct finish button after vpn selection.
I have - In Geneal Tab --> Remote Access selected..
Security tab -> only MS-CHAP V2 selected
IP Tab --> only DHCP selected
PPP TAB --> ALL SELETED
Please let me know if I am doing any thing wrong.
Thanks,
Krishna.
Server side looks correct. Let's do this simple test on the local network:
On a client create a VPN connection, use the server IP address as the connection point.
Reboot client. Try to connect. if you get 619 do the following:
Then go to the client VPN connection | Properties | Networking |
Type of VPN (automatic) | Settings | Uncheck Enable LCP Extension
Test your vpn connection
I am a bit surprised.... I configured the RRAS as you posted... I configured the client and had error:169 as you had.... I searched the web & MS Knowledge and couldn't find the answer.... so I debugged the problem and solved it before I post the previous post....
You didn't post what you did with the client side - so I don't know where to go since what I set up worked.... Please post what you did with the client side - please post the client's output from IPConfig /all also.....
The local lan test is the quickest test... don't worry about coming from the router until the inside test is complele....
if you want to look at the router - you will need to open specific ports that meet with your plan. Open ports:
IPSEC: UDP 500 (protocol 50 & 51)
PPTP/L2TP: 1723 (TCP)/1701 (UDP)
SSL: 443 (TCP)
GRE: 47 (IP Type) or tell your router to allow VPN pass through PPTP/IPSec
If I connect using LAN, it works fine, but I have to select in Security tab in client side : "Typical Settings-> Require Secure password & Require data encryption (disconnect if none)". If i select the above settings it gets through even though I have configured MS-CHAP V2 at server end.
Not clear on this, why is this doing so? If I select MS-CHAP V2 , then it doesn't work and it stops at veryfing username and password.
Any clues on this?
Many Thanks,
Krishna.
Glad the LAN test is working - from there you go to router test - knowning everything that's not working is router side.
For you current issue, if you are forcing MS-CHAP v2, did you uncheck MS-CHAP? You will also need to lookup and fix-up the registry.....
If you select specific security protocol - you will need to match up the security protocols and settings at both ends.
You need to research and install service pack or fixes for clients & server to match them up.
Example:
a) For error 691: http://support.microsoft.c
b) if server has 128-bit encryption then back-level clients need to upgrade for supporting 128-bit encryption.
In your case it hangs - so you need sniff and look at the problem with captured packets.
Business Accounts
Answer for Membership
by: Jeb911Posted on 2005-09-27 at 17:10:57ID: 14971724
Krishna, have you treid accessing this server internally? I would try using a client on the local network and see if this works. If you have done all of this, when you create a new VPN connection, go to the properties of that connection and click on the Networking tab and change the type of VPN to "PPTP VPN"