We help IT Professionals succeed at work.

VPN Error 806 and Error 721

Medium Priority
12,485 Views
Last Modified: 2008-06-25
I setup Server 2003 RRAS, the user has remote access with Dial-uin allowed
Linksys router WRV54G has a passthrou to ports 1723 both and 47 both to server.

When I try to VPN in from another location using a Windows server 2003 I lets me then it tries to verify username and password, it takes about 60 seconds and then comes back with
"Disconnected Error 806: a connection between your comuter and the VPN server has been established, but the VPN connection cannot be completed. The most command cause for this is that at least one internet device (for example firewall or router) between your computer and the VPN server is not configured to allow GRE protocal packets. Verify that protocal 47 GRE is allowed on all personal firewall devices or routers"

When I try it from a Windows XP computer I get a the same but a diff error:
"Disconnected error 721 the remote computer did not respond"

I can VPN to other sites from both of these computer.

Help?
Comment
Watch Question

CERTIFIED EXPERT
Top Expert 2013

Commented:
GRE is protocol 47, not port 47.  On the WRV54G you need to enable port forwarding of TCP PPTP packets on port 1723 to the VPN server as you appear to have done, but to enable GRE pass through on the WRV54G you need to go to the Security section of the router and on the VPN tab enable the setting "PPTP pass through".
See if that helps, if you have not already done so. If not, what make and model modem are you using.
jsarinanaI.T. Manager

Author

Commented:
Thanks RobWill,
The router is a Linksys WRT54G. When I go into the security section/VPN I have ipsec, pptp and L2tp enabled. I do not see anything on GRE pass through. I do have port 1723 open to the server. The firmware is v2.02.7 02/27/2004

Any other suggestions?
CERTIFIED EXPERT
Top Expert 2013
Commented:
On the WRV54G PPTP pass-through is GRE pass-through. I don't know why they can't call it that. So, it sounds like you have it configured properly.

Not that it matters for this part of the configuration, but is it a WRV54G or a WRT54G ?  You mention both above.

I was asking about the modem make and model, as some are combined modems and routers. If yours is one of these it will need to put in Bridge mode if that has not already been done. The combined units are usually set up to do NAT (Network Address Translation) as is your router. VPN's do not work well with 2 NAT devices.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
jsarinanaI.T. Manager

Author

Commented:
It's a WRT54G. I updated the firmware and Presto it works now.

Thanks
CERTIFIED EXPERT
Top Expert 2013

Commented:
Great, glad to hear. Sorry I wasn't more help.
Thank you for the points.
--Rob
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.