Solved

Comcast SMC Modem blocking PPTP

Posted on 2008-06-19
7
7,050 Views
Last Modified: 2013-12-14
Hi,

We have a Comcast Business SMC Networks modem hardware version 1B and are having problems getting PPTP to pass through.  I have called Comcast and they say it should work.  The only options for port forwarding on this modem are for TCP and UDP.  We need the GRE packet forwarded to enable PPTP to reach the server.  If we enable DMZ to the server, we can VPN to the server.  However, this opens up all ports.  We have called in and asked if they can enable PPTP passthrough on their end and they say they cannot.  Is there a way to forward the GRE packet on this modem without using DMZ?  
0
Comment
Question by:OAC Technology
  • 4
  • 2
7 Comments
 
LVL 44

Expert Comment

by:Darr247
ID: 21831413
According to http://www.iana.org/assignments/port-numbers PPTP should use TCP or UDP port 1723.
Did you try forwarding port 1723 on both TCP and UDP?
0
 
LVL 2

Author Comment

by:OAC Technology
ID: 21833103
yes, it is already forwarded.
0
 
LVL 44

Expert Comment

by:Darr247
ID: 21834943
Does the comcast unit have port triggering, too?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 2

Author Comment

by:OAC Technology
ID: 21838337
yes
0
 
LVL 44

Accepted Solution

by:
Darr247 earned 500 total points
ID: 21839452
With 1723 TCP/UDP entered in the port triggering can you initiate the connection going in the other direction?

Here is the technical description of PPTP connections:
http://www.ietf.org/rfc/rfc2637.txt?number=2637
Rather dry reading, though.

You don't mention what OS either end is using, but if they're microsoft, here are some troubleshooting tips:
http://support.microsoft.com/kb/241251
http://support.microsoft.com/kb/241252
http://support.microsoft.com/kb/164601

I also saw a couple articles that described a problem that occurs when both ends are using subnets that can appear in the subnets of the other end too (e.g. 10.10.10.0/24 and 10.10.0.0/18) ... but your description doesn't mention the other end employing a private subnet from behind a router.

Do you have another router to try forwarding port 1723 on so you can ask comcast to replace the SMC unit if that works?
Do you have to manually apply firmware updates to the SMC or are they pushed out automatically by comcast during low-traffic periods?
0
 

Expert Comment

by:SublimeComputerServices
ID: 34992959
This is an old post but Comcast has added the GRE protocol in the port forwarding tab of the firewall.

You have to create two rules:

You still have to have port 1723 forwarded to your server.  Then you add the GRE protocol to forward to your server as well.
0
 
LVL 44

Expert Comment

by:Darr247
ID: 36536051
Another update...
The Internet Assigned Numbers Authority (IANA) has changed the link to their list of well-known/assigned ports...

here are the new URLs:

XML version - http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xml
Text version - http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.txt
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Cable Modem Provisioning from DPoE compliant server  This Article is to support CMTS administrators to provide an overview of DOCSIS compliance configuration file, and to provision a cable modem located at customer place from a Back office serve…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

806 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question