Solved

VPN Connection issue

Posted on 2014-04-14
13
197 Views
Last Modified: 2014-04-28
I have set up a VPN server on a client's Window 7 Professional file sharing computer.  One of the staff wishes to connect via WAN from home - I have attempted to configure their Windows 7 machine to connect however when I try to initiate a connection I get a 'connection failed' error (surprisingly rapidly).  Interestingly, if I change the password on the connection computer to one that  I know is incorrect, the computer responds as you would expect, i.e. incorrect username or password so at the very least, some form of username/password validation is going on.  I set up a connection on another machine using the same details and it connected perfectly 1st time so it's safe to assume that the issue is with the client machine not the server.
0
Comment
Question by:frasierphilips
  • 7
  • 6
13 Comments
 
LVL 10

Expert Comment

by:Rafael
ID: 40000121
What software did you use to set up the VPN ?
0
 

Author Comment

by:frasierphilips
ID: 40000124
I used the software supplied with Windows 7 which I configured manually.
0
 
LVL 10

Expert Comment

by:Rafael
ID: 40000152
One the shared computer you must specify the users that you want to give VPN access to.

You must make sure that you select the option that indicates you want all users connecting to this network through the Internet.

Don't forget the type of IP you want to use for this connection. In most cases, the option commonly chosen by users is "TCP/IPv4." However, it may be using IP V6 which will cause a problem.

Finally, make sure you have clicked the "Allow Access" button. You may have to create local user accounts on the shared PC with passwords if not on a domain.  If on a domain then it would be "doman\user"
0
 

Author Comment

by:frasierphilips
ID: 40000163
Sorry to be a pedant, but please bear in mind that only one computer can't connect (this is the one that needs sorting) - use exactly the same details on another Windows 7 computer and it connects perfectly.  I think it's more likely a configuration issue on the client machine.
0
 
LVL 10

Expert Comment

by:Rafael
ID: 40000185
Ahhh now I see. Here is a test that has worked in the past. Find the registry key from a working PC for the VPN. I know that the remote machine may be different but try to match it up as much as you can. Export the key. Then import the key into machine that is failing. reboot and then try again.

Let me know what happens.
0
 

Author Comment

by:frasierphilips
ID: 40000195
Do I just search the registry for 'VPN'?
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 10

Expert Comment

by:Rafael
ID: 40000213
Search the registry for the exact name of the VPN.

You may also have to look in these locations. Keep in mind it may be different base don the set up.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

HKEY_CURRENT_USER\RemoteAccess\Profile\
0
 

Author Comment

by:frasierphilips
ID: 40002579
Things have now moved on - I was incorrect in my assumption that the problematic machine was running Windows 7 Pro - it was in fact running Vista Home Premium.  I have now updated the machine to 7 Pro and now it actually appears to be trying to log on correctly however it is not successful, returning:-

Error 812 The connection was prevented because of a policy configured on your RAS/VPN server.
0
 
LVL 10

Expert Comment

by:Rafael
ID: 40002738
There seems to be an authority authentication key mismatch. Manually key in the user settings including the password. Also, how did you configured the connection on the client side and what security have you specified on the server to allow the connection?  It's not best practice, but as a test can you set security to the default values?

Also, check the firewall to see if it is preventing this specific connection.  Also, the client's  router may not supporting VPN pass-through in its current configuration.  

Let me know
0
 

Author Comment

by:frasierphilips
ID: 40002758
I've sorted the previous problem - I had to change the Type of VPN on the security tab to PPTP then it worked - now I'm having a new horror (I forgot what a hateful minefield this is!) Whilst it now successfully connects 100% of the time, 60% of the time (at least), when I try to access the server (using \\NEWSERVER as it instructed when I completed configuring the server end) it tells me that it 'cannot access \\NEWSERVER' - I'm wondering if this may be a DNS issue?  40% of the time it works fine.  We've just upgraded our Internet connection to fibre (which is running at 75MB) - could this be a contributing factor?
0
 
LVL 10

Accepted Solution

by:
Rafael earned 500 total points
ID: 40002765
It never ends does it:)

One quick test of the DNS is to use the FQDN or IP.  \\server.xxx.xxx   or \\xxx.yyy.xxx.zzz

dont' forget the \C$ or D$ or whatever your share value is. so \\server\c$ or \\server\netlogon\sharename or \\xxxx\c$  etc.
0
 

Author Comment

by:frasierphilips
ID: 40002777
That didn't work - how do I know what the IP is?  This is for some none-technical users - if I use the IP, it needs to be the same every time or they'll be stumped
0
 

Author Comment

by:frasierphilips
ID: 40002788
It seems to be every other connect that doesn't work  - if I connect and try to access the folder it gives me an error.  If I then hang up and try again it works and so on.  Waiting a few seconds after the connection box has disappeared seems to improve stability too.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Suggested Solutions

For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now