July 6, 2008 03:14am pdt

1. RobWill 269,328
2. batry_boy 232,484
3. lrmoore 113,038
4. arnold 107,903
5. mwecompu... 64,924
6. dpk_wal 52,425
7. mkielar 41,600
8. ebjers 39,050
9. MrHusy 38,470
10. Cyclops3590 32,200
11. Voltz-dk 28,470
12. TechSoEasy 28,114
13. trinak96 26,165
14. keith_al... 21,046
15. stuknhawaii 20,075

1. RobWill 1,422,221
2. lrmoore 913,781
3. batry_boy 407,194
4. grblades 214,434
5. rsivanandan 145,141
6. calvinetter 112,055
7. arnold 109,903
8. dpk_wal 105,425
9. TechSoEasy 101,193
10. mwecompu... 82,724
11. tim_holman 75,964
12. keith_al... 75,885
13. MrHusy 71,744
14. ewtaylor 68,324
15. Cyclops3590 68,145

11.16.2003 at 07:32PM PST, ID: 20799943

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.0

Setup VPN - HELP!

Zone: Virtual Private Networking (VPN)

Tags: vpn, port, setup

Hi,
I been trying to set up my office VPN connection quite some time and till now, i still cannot make it. I need your help to guide me. thank you. My intention is to allow remote user access to my office network via dial-up internet access.
Here is my setup info:
I'm using Linksys befsx41 router (firmware: 1.45.3, Sep 26 2003). My server is Windows 2000 professional. The server is behind the linksys befsx41. Befsx41 is configured with a fixed IP address and the client is using dynamic IP. I already configured the router to forward the port 1723 to my server's IP address.
Then, when the client login to the VPN server, it verify the username and password. After that, a pop-up message said Error 628 the connection was closed.
I already refer to http://www.chicagotech.net to understand more about VPN setup.
Can you pls help me to setup my VPN successfully?
thank you.

Newbie

Start your free trial to view this solution

Question Stats

Zone: Networking

Question Asked By: william43

Solution Provided By: Computer101

Participating Experts: 10

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

11.16.2003 at 08:19PM PST, ID: 9761413

td_miles:

Did you also setup your router to forward IP protocol 47 (GRE) to your server ?

reading the page at:
http://www.chicagotech.net/vpnsetup.htm

It says this towards the bottom:

==================
Which ports need to be opened for running VPN

A: PPTP VPN uses TCP Port 1723, IP Protocol 47 (GRE); L2TP: UDP Port 1701; IPSec: Pass IP protocol 50 and 51. Note: 47 is a protocol number and not TCP port. The protocol name is GRE. It'll make a big difference when configuring your firewall or router.
==================

11.16.2003 at 09:45PM PST, ID: 9761651

william43:

Hi,
Yes, i did setup my linksys router to forward IP protocol 47 to my server. I did it at Forwarding page. I enabled both application:
App Ext. Port protocol TCP UDP IP Address Enabled
VPN 47 - 47 Yes Yes 192.168.0.x Yes
VPNApp 1723 - 1723 Yes Yes 192.168.0.x Yes

pls advise.
Thanks.

11.16.2003 at 10:23PM PST, ID: 9761757

td_miles:

The problem is that you are using TCP port 47. It is IP protocol 47 you need to forward, which is different to TCP port 47. This is different to TCP & UDP ports altogether.

11.16.2003 at 10:59PM PST, ID: 9761862

william43:

Sorry. i do not understand. can you pls explain a bit in details.
thanks.

11.17.2003 at 03:27AM PST, ID: 9762812

Rank: Sage

lrmoore:

Have you turned off DHCP server on the linksys? There is a one-liner in the user manual that states that if you are using port-forwarding, turn off dhcp.
Have you tried with the server IP as the DMZ host?

GRE has no concept of ports, so you can't use it as either a trigger, or forward it.

Microsoft's story:
PPTP traffic consists of a TCP connection for tunnel maintenance and GRE encapsulation for tunneled data. The TCP connection is NAT-translatable because the source TCP port numbers can be transparently translated. However, the GRE-encapsulated data is not NAT-translatable

http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/intwork/inbe_vpn_hidv.asp

11.17.2003 at 04:08PM PST, ID: 9767980

td_miles:

GRE (Generic Routing Encapsulation) is at the same level as UDP & TCP, it is NOT a TCP or UDP port. A packet might be a TCP packet or it might be a GRE packet (or one of many other), but it can't be both a GRE AND TCP packet at the same time.

Some links for reading:
http://support.microsoft.com/?kbid=241251
http://www.techeez.com/linux_tips/protoexplained.htm

Essentially the header of every IP packet has a field in it to identify what type of packet it is. This is called the "protocol" field. This field will specify whether the packet is ICMP, TCP, UDP, GRE (amongst others).

It's a bit hard to explain without delving into a full explanation of the IP ptotocol and packet headers/etc, maybe someone else can better explain it...

11.17.2003 at 06:12PM PST, ID: 9768421

william43:

Hi,
I didn't set the DCHP. I'm using a static LAN IP. and also i have a static public IP. I have tried the DMZ to point to my server IP. it doens't work as well. By the way, do i need to setup a DMZ server? how?

I just found a message in my VPN server(W2k Pro):
Remote Access Event ID: 20049
The user connected to VPN3-1 has been disconnected because the authentication process did not completed within a required amount of time.

I feel that the client able to connect to VPN serverbut failt to verify their username and password.

Do you have any suggestion?
Thanks.

11.24.2003 at 02:30PM PST, ID: 9814225

drev001:

Before you go any further, try to connect to the vpn server from WITHIN the network. Before troubleshooting external connectivity, make sure you're not barking up the wrong tree.

01.22.2004 at 07:34PM PST, ID: 10181095

rforneris:

William43,

Did you ever get a solution to this problem. I'm getting the same error.

Thanks

01.26.2004 at 10:57PM PST, ID: 10207352

william43:

Hi rforneris,
I still not yet get the solution. still figure it out!
hmm.........
feel like want to give up!

01.31.2004 at 05:08PM PST, ID: 10244814

togatown:

Simple fact of the matter is there is no solution. You cannot pass GRE traffic from the outside to your network so you cannot authenticate. Linksys removed this capability shortl after they were acquired by Cisco. If you want it to work, return the Linksys and get a Netgear. FYI, D-Link has the same issue.

02.04.2004 at 01:03AM PST, ID: 10269324

william43:

Hi All,
the Linksys is work actually. I just tested and found a solution to solve my problem!
Upgrade/degrade the linksys befsx41 firmware to Version 1.43.3.
ftp://ftp.linksys.com.sg/driver_firmware/

After that, i managed to VPN login via PPTP connection.
I also need to thank linksys technical support to assist me on this.
Try it now guys!

04.10.2004 at 11:42AM PDT, ID: 10797816

originsone:

Try this. It worked for me. Download the SSH Sentinel VPN Client from http://www.olin.wustl.edu/computing/reference/wireless/ipsec.cfm

Then use this forum download and follow it's instructions to the letter. I was up and running in a few minutes.
http://www.broadbandreports.com/r0/download/551029~f8306665a3cd7bf1adb19eff3963262c/VPN_Instruction2.zip

05.18.2004 at 09:47PM PDT, ID: 11104954

What90:

No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup topic area:
PAQ with points refunded

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

What90
EE Cleanup Volunteer

05.23.2004 at 06:28AM PDT, ID: 11137523

Computer101:

PAQed, with points refunded (500)

Computer101
E-E Admin

Accepted Solution

11.01.2004 at 07:30PM PST, ID: 12469766

mjalmassud:

Have you tried setting up the DMZ host your w2k and allow incoming connections to it from the internet?

04.15.2005 at 08:48AM PDT, ID: 13791843

himistu22:

I am having the exact same problem... but I Have tried everything on this page... and nothing... any ideas?

04.21.2005 at 11:16AM PDT, ID: 13836616

vertex:

Try different firmware for your linksys router: like alchemy

Most of them contain have protocol 47 (GRE) openend. and can even function as vpn router.

google search:

http://www.google.nl/search?hl=nl&q=alchemy+firmware+wrt54g&meta=

20080236-EE-VQP-29