Advertisement

05.07.2008 at 10:29PM PDT, ID: 23385152
[x]
Attachment Details

VPN not externally accessable, Error 721

Asked by jbogzevi in Virtual Private Networking (VPN)

Tags: 721

Alright so I've been searching the net for a solution to this problem and everyone seems to have the same answer, enable GRE Protocol 47. I have done this (to the best of my knowledge) and it has not resolved the issue.

Here is the situation. I have a box running Server 2003 set up as the domain controller, DNS server, VPN server, and is running active directory. It is connected through a switch and then into my ADSL router. It has two NIC (well three but only two are turned on) one connected to the router (192.169.0.x) and the other connected to a different router (192.168.1.x) which in turn is connected to the modem. The whole setup looks something like this:

internet--->modem(192.168.0.1)----->switch------>2003 server(192.168.0.3)
                                                               |                           |
                                                               |                           | (192.168.1.200)
                                                               |                           |
                                                          wireless router(192.168.0.2)
                                                                          |
                                                                          |
                                                                 (DHCP 192.168.1.100 - x.x.x.150)

The modem is an ActionTec M1000 with the latest firmware and I have Qwest as my ISP. The modem is supposed to support PPTP, L2TP, and IPSec. Qwest also states that they don't block protocols needed for VPN operation.

I have no trouble connecting from my local computers on the 192.168.1.x portion of the network but when i try to connect from off site the connection times out at "Verifying user name and password", XP systems will give me the 721 Error.

My modem doesn't have a specific "Enable PPTP passthrough" option but it does have an applications option where the user is able to assign common protocols to network devices. Under this section I assigned the preset PPTP, L2TP, and IPSec settings to my server (129.168.0.3).

In addition, I went to the forwarding tab and set up forwarding for ports TCP 1723 and GRE to forward to the server box.

For off site I've tried to verify that the forwarding is good by using pptpclnt.exe. I get the following results when I run it:

Initializing WinSock...
Obtaining host information...
Successfully resolved server's host information

======================================
Enter data to send to server (between 1 and 255 chrs.), then hit enter:
-->Hello!

Successfully connected to server using TCP port 1723 (PPTP)
Sending data to server

Waiting for a reply to the data which was just sent...
Received a reply.  Reply contains the following text:
--->

=================================
Connectivity test to TCP Port 1723 was successful!!!
Closing down socket...
=================================

Creating a socket to test GRE protocol traffic...

Total GRE packets sent = 1
Total GRE packets sent = 2
Total GRE packets sent = 3
Total GRE packets sent = 4
Total GRE packets sent = 5

=====================================
Check server to see if the GRE packets were received successfully
=====================================

Closing down socket

Goodbye!

To my knowledge this is what I would expect to see if the forwarding was working properly. When I run the pptpsrv.exe on the server box the results also seem to mimic what would be normal if everything was indeed working correctly.

My only other thought was that maybe the DHCP wasn't working correctly so after fiddling with it unsuccessfully for a few hours turned it off and have the Routing and Remote Services assigning static values (192.168.0.50 - x.x.x.60)

So I am completely stumped and do not know where to go from here.
I would appreciate any help that could be rendered.
ThanksStart Free Trial
[+][-]05.07.2008 at 11:34PM PDT, ID: 21522698

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.08.2008 at 12:31AM PDT, ID: 21522930

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.08.2008 at 05:15AM PDT, ID: 21523972

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.08.2008 at 09:26AM PDT, ID: 21526163

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.08.2008 at 11:44AM PDT, ID: 21527340

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.12.2008 at 09:37AM PDT, ID: 21548429

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.13.2008 at 02:34AM PDT, ID: 21553378

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zone: Virtual Private Networking (VPN)
Tags: 721
Sign Up Now!
Solution Provided By: francoisrossouw
Participating Experts: 2
Solution Grade: A
 
 
[+][-]05.13.2008 at 10:39AM PDT, ID: 21557379

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.14.2008 at 02:12AM PDT, ID: 21562259

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.19.2008 at 10:21AM PDT, ID: 21599700

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]05.19.2008 at 10:54AM PDT, ID: 21599996

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.19.2008 at 11:18AM PDT, ID: 21600165

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628