NT4 Server , no VPN access from WKS

I have set up a NT4 Server SP6a, port 1723/47 opened on router, on a different broadband connection, I can setup VPN and connect using the domain name, so I assume the FQDN is working, with just TCP/IP enabled, the connection take around 5-10 seconds, but after its connected, I cant seem to access or even see any of the NT4 server resources, as if the server does not exist.

I tried to add NetBUEI, but this caused the connection to 'hang' for about a minute, then error 733, the NT4 Server is on a different ISP via router, and the Win2000WKS is on a separate ISP also by router connection.

Am I missing something on the setup ?

Many thanks
LVL 4
robertdimsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

grbladesCommented:
Hi robertdims,
PPTP VPN requires UDP port 1723 and GRE (IP protocol 47). GRE is not a port and I suspect you have inadvertinly permitted tcp/udp port 47 instead.
0
robertdimsAuthor Commented:
Thanks for the reply, but I am told its TCP port 1723 and GRE47 (I assume this is the UDP port)
0
grbladesCommented:
Sorry it is TCP port 1723 not UDP.
GRE however is IP protocol 47 which is neither TCP or UDP.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

rindiCommented:
If VPN is on a different box, you shouldn't need to open any port (1723). Port 80 or 8080 (normal port used for webaccess) should be enough. If you are connected via VPN, can you ping your internal network?
0
robertdimsAuthor Commented:
Yes I can ping the server, but the strange thing is even though I have DHCP enabled on the server, the 2000WKS assigned an IP thats within the range specified by the server, but the Gateway is the same as the IP, and the subnet is strange.

Server IP  10.0.0.100
Subnet     255.0.0.0
Gateway   10.0.0.2

WKS assigned IP   10.0.0.110
Subnet                  255.255.255.255
Gateway               10.0.0.110

The connection seems to be painless, just no access to any resources as if the server does not exist.

Thanks
0
grbladesCommented:
The IP address and gateway etc... that you have been assigned is correct. Basically what is means is that to go anywhere the traffic should be sent to itself. The VPN software encrypts the data and sends it out of the network directly.

TCP/1723 is used for authentication.
GRE (47) is used for the encrypted traffic. Therefore if GRE is blocked you will be able to log in but not transfer any encrypted traffic.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
vandCommented:
If GRE is blocked you will never be able to connect at all. GRE is necessary for the authentication, so if he is connecting, GRE is not the issue.

Can you connect to the server by UNC \\10.0.0.110?

Make sure all of your scope settings are configured on the NT Server as well. You can assign the default gateway from there. The Subnet should have been established when you created the scope for the remote connections. Also make sure that this is the only DHCP service on the network.
0
rindiCommented:
Is there a software Firewall installed on your Workstation? Are you trying to connect to a Domain Account on the server? To connect to your VPN, are you using a software on your win2k PC, or is this being done by a separate box?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.