VPN
--
Questions
--
Followers
Top Experts
PPTP VPN not working - NetGear DG834G and Inty Exoserver
Okay, I'm trying to set up a VPN between home and my work office, so I can work remotely.
My home setup is a wireless network using the Netgear DG834G ADSL modem/router as my gateway. Internally I've set it to the 192.168.86.* range. I also have a static IP address. My PC runs Windows XP Pro, SP2.
At work, we have an inty Exoserver as the firewall/gateway, and the main server is running on 192.168.1.1, which is NATed to the external static IP address of the office. The rest of the internal network at the office runs on the 192.168.0.* address space. The server is running windows 2003 server.
I've given up on the IPSec VPN for the time being, in favour of the simpler (in theory) PPTP VPN.
The DG834G supports PPTP VPN passthrough, so no changes should be necessary there. I've enabled all incoming traffic from the office static IP address, just in case. All outgoing traffic is allowed by default. I have turned off the windows XP firewall, and used the 'connection wizard' to set up the PPTP vpn on the XP Pro machine to the static IP address of my workplace.
On the inty side, I have allowed all traffic from my home static IP address, and set up PPTP access for up to 10 machines, with the allocated IP range 192.168.0.221-231, which are all currently unused.
When I attempt to initiate the connection from the XP Pro machine at home, it comes back with "Error 800: Unable to establish the VPN connection. The VPN server may be unreachable, or security parameters may not be configured properly for this connection"
Any ideas what I need to change to get this working?
My home setup is a wireless network using the Netgear DG834G ADSL modem/router as my gateway. Internally I've set it to the 192.168.86.* range. I also have a static IP address. My PC runs Windows XP Pro, SP2.
At work, we have an inty Exoserver as the firewall/gateway, and the main server is running on 192.168.1.1, which is NATed to the external static IP address of the office. The rest of the internal network at the office runs on the 192.168.0.* address space. The server is running windows 2003 server.
I've given up on the IPSec VPN for the time being, in favour of the simpler (in theory) PPTP VPN.
The DG834G supports PPTP VPN passthrough, so no changes should be necessary there. I've enabled all incoming traffic from the office static IP address, just in case. All outgoing traffic is allowed by default. I have turned off the windows XP firewall, and used the 'connection wizard' to set up the PPTP vpn on the XP Pro machine to the static IP address of my workplace.
On the inty side, I have allowed all traffic from my home static IP address, and set up PPTP access for up to 10 machines, with the allocated IP range 192.168.0.221-231, which are all currently unused.
When I attempt to initiate the connection from the XP Pro machine at home, it comes back with "Error 800: Unable to establish the VPN connection. The VPN server may be unreachable, or security parameters may not be configured properly for this connection"
Any ideas what I need to change to get this working?
Zero AI Policy
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
An 800 error is a basic connection error, there is no communications or "handshaking" at all. I suspect the routing of port 1723 from the external device to the XP machine is blocked somewhere. To confirm this from the XP host/server machine go to http://www.canyouseeme.org and test for port 1723. See if it is open and forwarded correctly. If it fails you need to look at the forwarding of PPTP (port 1723) on your firewall.
Ok, I think we've made some progress.
From the inty Exoserver, I've opened & forwardered port 1723, and it now reports on canyouseeme.org as being open. On the XP Pro/Netgear client side, I have again enabled port 1723 in the router, and set it to forward to the xp pro box. However, when I scan on canyouseeme.org, it still tells me port 1723 is not open. Additionally, when I try netstat -an from the XP pro box, there is no entry (listening or otherwise) for port 1723. Is there something I need to do to enable this?
Also, when I now attempt the VPN connection, I get "verifying username and password" dialog, but no response back and error 721. I assume this is because the router/xp pro isn't accepting the return call on port 1723.
From the inty Exoserver, I've opened & forwardered port 1723, and it now reports on canyouseeme.org as being open. On the XP Pro/Netgear client side, I have again enabled port 1723 in the router, and set it to forward to the xp pro box. However, when I scan on canyouseeme.org, it still tells me port 1723 is not open. Additionally, when I try netstat -an from the XP pro box, there is no entry (listening or otherwise) for port 1723. Is there something I need to do to enable this?
Also, when I now attempt the VPN connection, I get "verifying username and password" dialog, but no response back and error 721. I assume this is because the router/xp pro isn't accepting the return call on port 1723.
ASKER CERTIFIED SOLUTION
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
EARN REWARDS FOR ASKING, ANSWERING, AND MORE.
Earn free swag for participating on the platform.
VPN
--
Questions
--
Followers
Top Experts
A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.