Setup VPN using Windows 2k3 Server and Linksys BEFSR41 v.2

[kmcallister]

I have routing and remote access installed and configured on my windows 2k3 server. I can successfully create a VPN connection internally but get an error 800 from external attempts. Ports 1701,1723 and 500 are all forwarded to the server's IP in the router. When I make an attempt to connect from external, I can see an event logged in the router on port 500. Can anyone shed some light on what I'm missing?

Thanks in advance
KMcAllister

 

[ChicagoTechNet]

quoted from

http://www.chicagotech.net

Error 800: Unable to establish the VPN connection. The VPN server may be un-reachable, or security parameters may not be configured properly for this connection.

Resolutions:
1) if you have firewall, open TCP Port 1723, IP Protocol 47 (GRE).
2) make sure you can reach the VPN server by using ping. Sometimes, poor connection can cause this issue too.
3) You may need to updated firmware on a router or firewall if other OS (win9x/nt/me/w2k) works except XP.
4) The VPN server may not be able to get IP from DHCP for the VPN client. So, you may want to re-configure VPN host networking settings. For XP pro VPN host, go to the Properties of the VPN>Network, check Specify TCP/IP address and Allow calling computer to specify its own IP address, and uncheck Assign TCP/IP addresses automatically using DHCP.
5) Make sure other secure software blocks your access, for example, if you use Norton secure software, you may need to add the remote client's IP so that the client can access.


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[kmcallister]

According to Linksys, the IP protocol 47 is what they call IPSec passthrough on the the router. Which is enabled. I found out that the firewall form the location where I connecting from is not passing the traffic. I then dialed out using Earthlink and was able to get 1 step further. I now get verifying username and password then it comes up with an error 721.

KMcAllister

 

[kmcallister]

I downgraded the firmware on the router from 1.45.7 to 1.42.7 and it then allowed me to log in. Now I'm working on accessing the internet and the ability to view workstations and servers within the network.

KMcAllister