Home All Groups Group Topic Archive Search About

VPN and Windows Firewall

Author
7 Oct 2006 6:41 PM
andresms5
I have 2 computers both running windows home. One is on my office and
the other is at home, behind a router. Both machines run Windows
Firewall.

I also setup a VPN connection between them. The one on my office being
the server and my laptop at home as the client. I followed Windows
Wizards in Add a new connection in both of them to setup the connection
without doing anything special.

I can get it to work if I disable any of the two windows firewalls.
This is a especially strange at the client side, as the firewall should
have nothing to do there.

The error I'm getting is Error 721. The error message appears after I
wait for like a minute in the dialog "Verifying Username and Password".

Thanks for any help.

Author
7 Oct 2006 8:37 PM
nass
Show quote Hide quote
"andres***@gmail.com" wrote:

> I have 2 computers both running windows home. One is on my office and
> the other is at home, behind a router. Both machines run Windows
> Firewall.
>
> I also setup a VPN connection between them. The one on my office being
> the server and my laptop at home as the client. I followed Windows
> Wizards in Add a new connection in both of them to setup the connection
> without doing anything special.
>
> I can get it to work if I disable any of the two windows firewalls.
> This is a especially strange at the client side, as the firewall should
> have nothing to do there.
>
> The error I'm getting is Error 721. The error message appears after I
> wait for like a minute in the dialog "Verifying Username and Password".
>
> Thanks for any help.
>
>

Hi Andy,
First you should configure your Router to allow VPN network connecion and
allow traffics between your Laptop (client) and Desktop Offce (server).
Are you able to ping from the Laptop?.
Have a look at this article: http://technet2.microsoft.com/WindowsServer/en/library/0332e37c-61da-44fe-9633-4438d37e19021033.mspx?mfr=true
HTH.
Please let us know.
Regards,
nass
-----------
www.nasstec.co.uk
Author
8 Oct 2006 1:44 PM
andresms5
> Hi Andy,
> First you should configure your Router to allow VPN network connecion and
> allow traffics between your Laptop (client) and Desktop Offce (server).
> Are you able to ping from the Laptop?.
> Have a look at this article:
> http://technet2.microsoft.com/WindowsServer/en/library/0332e37c-61da-44fe-9633-4438d37e19021033.mspx?mfr=true
> HTH.
> Please let us know.
> Regards,
> nass
> -----------
> www.nasstec.co.uk

Nass, thank you for your reply.

My router has VPN traffic enabled (both PPTP and L2TP). I don't think
it has anything to do with it, as I can get the connection to work by
just disabling any of the two windows firewalls and leaving the router
alone.

I am able to ping from the laptop. In fact, I run various services in
my Desktop at the office (Cygwin/sshd, VNC, etc...) and they all work
great.

The article talks about the GRE protocol. I'm not sure if it is allow
through the Windows Firewall, but I don't know how to check, as it is a
network layer protocol.
Author
8 Oct 2006 2:01 PM
Sooner Al [MVP]
You might make sure the XP SP2 Windows Firewall is configured to allow PPTP
VPN traffic through...

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvanced.JPG

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvancedServices.JPG

http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallServiceSettings.JPG

When you forward TCP Port 1723 traffic through the XP SP2 Windows Firewall
GRE Protocol 47 traffic is automatically enabled. There is a test you can
run detailed in the "PPTP Ping" and "VPN Traffic" sections on this page that
may help pinpoint the problem.

http://www.microsoft.com/technet/community/columns/cableguy/cg0105.mspx

Also check the event viewer logs for possible clues...

http://www.microsoft.com/technet/support/ee/ee_advanced.aspx

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

<andres***@gmail.com> wrote in message
Show quoteHide quote
news:1160315070.885771.233360@i3g2000cwc.googlegroups.com...
>> Hi Andy,
>> First you should configure your Router to allow VPN network connecion and
>> allow traffics between your Laptop (client) and Desktop Offce (server).
>> Are you able to ping from the Laptop?.
>> Have a look at this article:
>> http://technet2.microsoft.com/WindowsServer/en/library/0332e37c-61da-44fe-9633-4438d37e19021033.mspx?mfr=true
>> HTH.
>> Please let us know.
>> Regards,
>> nass
>> -----------
>> www.nasstec.co.uk
>
> Nass, thank you for your reply.
>
> My router has VPN traffic enabled (both PPTP and L2TP). I don't think
> it has anything to do with it, as I can get the connection to work by
> just disabling any of the two windows firewalls and leaving the router
> alone.
>
> I am able to ping from the laptop. In fact, I run various services in
> my Desktop at the office (Cygwin/sshd, VNC, etc...) and they all work
> great.
>
> The article talks about the GRE protocol. I'm not sure if it is allow
> through the Windows Firewall, but I don't know how to check, as it is a
> network layer protocol.
>
Author
8 Oct 2006 6:05 PM
andresms5
Sooner Al [MVP] wrote:
Show quoteHide quote
> You might make sure the XP SP2 Windows Firewall is configured to allow PPTP
> VPN traffic through...
>
> http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvanced.JPG
>
> http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvancedServices.JPG
>
> http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallServiceSettings.JPG
>
> When you forward TCP Port 1723 traffic through the XP SP2 Windows Firewall
> GRE Protocol 47 traffic is automatically enabled. There is a test you can
> run detailed in the "PPTP Ping" and "VPN Traffic" sections on this page that
> may help pinpoint the problem.
>
> http://www.microsoft.com/technet/community/columns/cableguy/cg0105.mspx
>
> Also check the event viewer logs for possible clues...
>
> http://www.microsoft.com/technet/support/ee/ee_advanced.aspx
>
> --
>
> Al Jarvi (MS-MVP Windows Networking)
>
> Please post *ALL* questions and replies to the news group for the
> mutual benefit of all of us...
> The MS-MVP Program - http://mvp.support.microsoft.com
> This posting is provided "AS IS" with no warranties, and confers no
> rights...

Thank you for your replies. It looks like it is working now with both
firewalls on. I don't understand why the solution works, but it solved
it. I had read similar posts telling me to enable the VPN Incoming
connections. What I didn't try was to edit this entrance as Sooner
pointed out in one of the links he sent. In my case, the entrance had
everything right, except it had the NETBIOS name of the computer insted
of the actual IP. I put the IP address in the field and it solved the
problem.

Thank you very much for all your help

Bye