asked on

L2TP Server on Mac Server Not Working - Ports Not Open

Hi. We have a client with a MAC server running an L2Tp VPN. Since an OS update it's now not accepting VPN connections. The VPN server is running and the port forwarding is setup correctly, however if I run a port scan from outside it's telling me that port 1701 is not accessible. When i try to connect on VPN it says connection refused. I ran a port scan internally on the Mac Server through network utilities and it doesn't show port 1701 as being open.

How can i troubleshoot this further and / or open port 1701 to allow L2TP traffic again?

Thanks
Jim

vidovic

You need to open UDP ports 500, 1701 and 4500 for L2TP
You need to open TCP ports 1723 for PPTT
All these ports need to be opened on your router/firewall and forwarded to the server's IP address.

James Parsons

ASKER

Yes. Those have already been done. All required ports are open and forwarded.

vidovic

Are your Service ACLs set up for this user?? Does he/she have access to this service?

James Parsons

ASKER

I believe so. It was working fine until an Apple OS update. Now it just says that the server isn't responding when they try to connect. I can see from the Utilities screen that the ports for L2TP are not open.

vidovic

Did you try connecting as an Admin user or another user just to check Authorization?

James Parsons

ASKER

Yes. And when I do a port scan externally it shows the port as not being opened. I also tried connecting across the LAN rather than using the external IP to rule out port forwarding - same result. I'm convinced it's a port issue - just not sure where to look or fix it.

Kash

what about a PPTP connection. Does that work ?

Does your router support VPN. Have you tried router to do the VPN to see if it works on that ?

What version of OS X Server are you running ?

What kind of router is it ?

ASKER CERTIFIED SOLUTION

James Parsons

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

James Parsons

ASKER

None of the suggestions worked so we setup a PPTP connection as we had no choice and needed to get it working somehow.