Create VPN Connection in WIN XP PRO from behind a router

[damien82517]

I am trying to create a VPN connection on My Windows XP Pro machine, from behind a Broadband Router.

I have used the VPN Connection wizard on my machine to initially set this up.
However clients will be unable to connect to my machine as it is behind a router.
I have set my PC to use a static IP address, and configured my router to forward requests to ports 1723 (PPTP), 500 and 50-51 (IPSEC) to the static IP address of my PC.

However when using the VPN connection wizard on my client machine (Also WIN XP PRO) and entering the external ip address of my router, i get a connection error..
Error 800: Unable to establish the VPN connection. The VPN server maybe unreachable or security parameters may not be configured properly for this connection.

Can anyone help?

 

[Papa4]

I have a Linksys Router/Firewall/Switch connected to my
Adelphia cable. I have successfully initiated a VPN connection from my home PC to my work PC business computer by placing my home PC in the DMZ zone of the Router. Works fine. The work computers are behind a Win 2003 Server running the latest Microsoft 2004 IIS Firewall software.
The system manager and I had to do some experimenting and tweaking of the policies on the Firewall to get this to work.

Make sure you have a good Anti-Virus and the Windows firwall running on your PC as you are exposed to the jerks of the world in the DMZ zone.

Papa4

 

[linney]

Try the troubleshooting suggestions in this article.

How to configure a connection to a virtual private network (VPN) in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;314076&sd=tech

 

[damien82517]

I have gone over all of my settings and i think the problem is my router not forwarding port 1723 correctly. I am using a BT Voyager 2100 Wireless ADSL router... Has any one experiance3d simlilar problems with port forwarding on this router?

 

[LloydSev]

Remember that IPSec uses Protocol 50 and Protocol 51, not port 50 and port 51.

Computer/Network Technician
CCNA

 

[damien82517]

Yeh i realised thatyesterdayand i have corrected it.

Heres my current router settings....

Port forwarding:
TCP 1723 to my internal IP address
UDP 500 to my internal IP address

IP Filtering has been set to allow GRE protocol through along with 51/52 for IPSEC.

I have even added my internal ip address as DMZ host - but this didnt work either.