Netgear Router unable to VPN

Posted on 2006-11-08
Last Modified: 2008-01-09
Hi There,

I wonder if anyone can assist.

I have SBS2003 with 2 nics.

Broadband connects to 1st Netgear DG834 ADSL Router which connects to my WAN nic
2nd Netgear Wireless Router connects to LAN nic.

Can anyone tell me which ports I need to open on the 1st Netgear Router?  At the moment I have ports 444, 3389, 4125 along with VPN-L2TP, HTTPS, HTTP, VPN-PPTP.

I can see the http://sbs1/remote webpage and use Sharepoint but I cannot physically VPN on the server thus unable to map drives.

Any tips greatly received.

Question by:geeing
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 77

Expert Comment

by:Rob Williams
ID: 17900996
Assuming you are using the SBS VPN (default Windows PPTP) you need to forward "VPN-PPTP". It requires port 1723, and GRE. GRE is not actually forwarded but allowed to pass, often by enabling an option named "PPTP pass-through". However, on the Netgear routers I have used, if you forward the predefined PPTP service, rather than a creating custom rule for port 1723, GRE is automatically enabled.

Note: VPN's do not usually work well through multiple NAT (Network Address Translation) devices such as routers. You need to forward the traffic on the DG834 ADSL to the 2nd Netgear and then from there to your SBS, but this may not work. The proper way to do it is to put the ADSL router in Bridge mode, configure the WAN interface of the 2nd Netgear to connect to your ISP, and then forward your PPTP traffic to the SBS.

Author Comment

ID: 17902323

Ideally how should the network be setup?  Ditch one of my routers?
LVL 77

Accepted Solution

Rob Williams earned 250 total points
ID: 17902724
>>"Ditch one of my routers?"
No, not necessary. The ideal set up is a modem and a single router. Putting the DG834 ADSL Router in Bridge mode effectively makes it a basic modem, by disabling all the router and DHCP functions. Quite an acceptable practice.
Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.


Author Comment

ID: 17904873
Aha.. I see what your saying.  I'll do that.  By the way.. I rerun the VPN Wizard and it all works!!  Crazy Technology.
LVL 77

Expert Comment

by:Rob Williams
ID: 17905679
Thanks geeing. If it works, wonder if the modem is already in Bridge mode. It is very common to do that.

Author Comment

ID: 17906121
Just tried from different location and getting error 800, but I think might be due to firewall... but I'll check out some different things.. thanks again

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
Like many others, when I created a Windows 2008 RRAS VPN server, I connected via PPTP, and still do, but there are problems that can arise from solely using PPTP.  One particular problem was that the CFO of the company used a Virgin Broadband Wirele…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question