asked on

Netgear FVS328 VPN passthrough rule

Hi All,

I am trying to set-up a VPN (routing and remote access) on a Server 2003, I have the above VPN router and need to create a Rule that allows remote access and am finding it hard.

All my attempts seem to fail, I have a rule that is forwards to the ip address of the server but I keep getting nothing, do I need to use a type of custom service with a specific port or what??

Thanks

P.S if I use Windows accounting in the VPN set-up on the server I am unable to start the service, I keep getting error 800702B3 which points towards a security issue, the service is set to use Local account which of course a Administrator.

Encrypted1024

Microsoft VPN has issues with NAT-T (NAT Traversal) scenarios. This may be your issue. I know there are some work arounds and it may also be changed in 2008. Here is a link.

http://support.microsoft.com/kb/885407

I will see if I can find more on this issue.

JParker505

Create a service for Port 500 and name it then got to Security > Firewall > Lan to Wan rules and make a rule with the service you just created and have that traffic directed to your server.

The Netgear device has a VPN in it also which uses port 500 unless you specifically forward it so somewhere else

smartsyatton

ASKER

Thank-you all for the advice but JParker505 my router / switch does not have Lan to Wan rules or i don't see this.

Encrypted1024

Have you verified that your VPN is actually working? Forget the passthrough, can you test the VPN without the Netgear? Once that is verified working then worry about port forwarding.

What kind of VPN connection are you trying to make, L2TP or PPTP, that will make a difference?

smartsyatton

ASKER

Hi,

I have tested the VPN is working by using an internal connection which also show in the VPN log, i am trying to set the service on the netgear with TCP/UDP port 500 and setting the router VPN ip address, then setting my remote machine 84.**.***.**:500 and expecting to connect or even get a VPN log entry but nothing.

Of course the stars are masked.

Encrypted1024

I believe you want to forward port 1701. Then open windows VPN client and connect. No need to put the port after IP address. Unless I am misunderstanding what you are doing.

smartsyatton

ASKER

Thanks for that, how does my netgear vpn switch know what to do, my RDP connections use a port rule to forward the connection to a specific router, with the VPN does it not need the same thing.

ASKER CERTIFIED SOLUTION

Encrypted1024

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial