VPN Error 800: Unable to establish the VPN connection.

I am getting the error 800: Unable to establish the VPN connection. The VPN server may be unreachable, or security parameters may not be configured properly.
I am using Win2003 and a Linksys router BEFSX41 router. I am forwarding the following ports:
HTTP   port 80
FTP     port 21
Telnet port 23
VPN port 1723

I am able to access the server using FTP, Telnet, and HTTP, but not VPN.

The local network gateway is 192.168.3.1
The WIn2003 server IP is       192.168.3.5

Under Routing and Remote Access server Properties, IP tab, I added a Static address pool of
192.168.3.210  -> 192.168.3.220

Ruben1717Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mcsweenSr. Network AdministratorCommented:
You also have to forward port 47 for MS PPTP (VPN) to work.
0
Ruben1717Author Commented:
Unfortunately, I forwarded port 47, but I am still getting the same error 800:
0
Rob WilliamsCommented:
Actually you do not want to forward port 47, it is protocol 47, GRE, which cannot be forwarded, but rather enabled. To enable on the BEFSX41 choose "enable PPTP pass-through" on the security/VPN page of the routers web configuration.
However, if that were the only problem you would likely get a 721 error. An 800 error is a basic connection failure.

-From the server go to  http://www.canyouseeme.org  It will display your Public?WAN IP. Verify this is the IP you are trying to connect to from the VPN client site.
-Assuming that is correct, then on that page test port 1723. This will verify if your port forwarding is configured and working. It will not test for GRE, protocol 47.
-The local and remote sites cannot use the same subnet, therefore the client site cannot use 192.168.3.x
-When testing this you need to be doing so from off site. The router cannot handle connecting the client from the same site to the WAN side of the server
-Do not configure any VPN connection information in the VPN section of the router
-If in doubt about any of the configuration good details can be found here:
Server 2003 configuration:
http://www.onecomputerguy.com/networking/w3k_vpn_server.htm
Windows XP client configuration:
http://www.onecomputerguy.com/networking/xp_vpn.htm
PPTP port forwarding with the BEFSX41:
http://www.portforward.com/english/routers/port_forwarding/Linksys/BEFSX41/Point-to-Point_Tunneling_Protocol.htm



0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ON-DEMAND: 10 Easy Ways to Lose a Password

Learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees in this on-demand webinar. We cover the importance of multi-factor authentication and how these solutions can better protect your business!

Ruben1717Author Commented:
Hello,
I stopped forwarding port 47, and enabled it as PPTP pass-through.
In http://www.canyouseeme.org , I test port 1723, and it givems the message "Success: I can see your service on port (1723). Your ISP is not blocking port 1723"
I change the client to use 192.168.7.x instead of 192.168.3.x as the VPN Server.
Also, I reconfigured the VPN server following the sample int "http://www.onecomputerguy.com/networking/w3k_vpn_server.htm"

I am still getting error 800.


0
Rob WilliamsCommented:
Sounds like something at the server is blocking access.
NAT should not be enabled in RRAS.
Any software firewalls enabled such as ZoneAlarm, Symantec security Suite or McAfee's Equivalent ?
Symantec's Virus protection with "Internet work protection" option can block the VPN, as can TrenMicro's Office Scan, and Windows One Care.
0
Rob WilliamsCommented:
Thanks Ruben1717,
Cheers !
--Rob
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.