Link to home
Start Free TrialLog in
Avatar of manelson05
manelson05Flag for United States of America

asked on

Remote VPNuser unable to connect to Server 2003/ Firebox setup

I have a remote user who is trying to VPN in to the network.
He keeps getting VPN error 619 and 691.

Since I did not set this up I have been troubleshooting this msot of the morning.
I have him added to the firebox the same as other users.
The PPTP group in AD on Server 2003 has some VPN users who were setup before I took over as having dial in enabled or not enabled so its nto consistent. I am thinking a user VPN's into the network via firebox then lands ona  server and then RDP'sinto there respective desktop.

I am now thinking the user may have the issue on his here end.

Any ideas?
Avatar of dpk_wal
dpk_wal
Flag of India image

Few questions:
1. Is FB acting as VPN server or the 2003 server.
2. If firebox, then are you using AD authentication or local authentication.
3. If you try to connect from another service provider as the user with trouble what are the results.
4. Are other users able to connect fine.
5. If you are using AD authentication, then pre ensure that the user is part of the group which is allowed in the policy.

Thank you.
Avatar of manelson05

ASKER

THE FB seems to broker a connection to RAS on Server 2003.
A users logs into FB with PPTP (barf) with seperate set of credentials.
From tehre they have access to network resources, laptop users have the apps local so its merely a data conenction such as DNS to bind local ODBC to the LAN's ODBC agent

I changed my Firewall setting at home and can get in but I have one user who still can not connect.
ASKER CERTIFIED SOLUTION
Avatar of dpk_wal
dpk_wal
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
This is the conclusion I drew on my own network at home, I had to allow pptp/vpn connections on the dsl router, since its a second firewall, things worked great. Now its a matter of the home user doing hte same, since I dont support home computers, they will have to resolve locally or call someone for an on call support request.