|
windows
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
VPN and Windows FirewallI have 2 computers both running windows home. One is on my office and
the other is at home, behind a router. Both machines run Windows Firewall. I also setup a VPN connection between them. The one on my office being the server and my laptop at home as the client. I followed Windows Wizards in Add a new connection in both of them to setup the connection without doing anything special. I can get it to work if I disable any of the two windows firewalls. This is a especially strange at the client side, as the firewall should have nothing to do there. The error I'm getting is Error 721. The error message appears after I wait for like a minute in the dialog "Verifying Username and Password". Thanks for any help.
Show quote
Hide quote
"andres***@gmail.com" wrote: Hi Andy,> I have 2 computers both running windows home. One is on my office and > the other is at home, behind a router. Both machines run Windows > Firewall. > > I also setup a VPN connection between them. The one on my office being > the server and my laptop at home as the client. I followed Windows > Wizards in Add a new connection in both of them to setup the connection > without doing anything special. > > I can get it to work if I disable any of the two windows firewalls. > This is a especially strange at the client side, as the firewall should > have nothing to do there. > > The error I'm getting is Error 721. The error message appears after I > wait for like a minute in the dialog "Verifying Username and Password". > > Thanks for any help. > > First you should configure your Router to allow VPN network connecion and allow traffics between your Laptop (client) and Desktop Offce (server). Are you able to ping from the Laptop?. Have a look at this article: http://technet2.microsoft.com/WindowsServer/en/library/0332e37c-61da-44fe-9633-4438d37e19021033.mspx?mfr=true HTH. Please let us know. Regards, nass ----------- www.nasstec.co.uk > Hi Andy, Nass, thank you for your reply.> First you should configure your Router to allow VPN network connecion and > allow traffics between your Laptop (client) and Desktop Offce (server). > Are you able to ping from the Laptop?. > Have a look at this article: > http://technet2.microsoft.com/WindowsServer/en/library/0332e37c-61da-44fe-9633-4438d37e19021033.mspx?mfr=true > HTH. > Please let us know. > Regards, > nass > ----------- > www.nasstec.co.uk My router has VPN traffic enabled (both PPTP and L2TP). I don't think it has anything to do with it, as I can get the connection to work by just disabling any of the two windows firewalls and leaving the router alone. I am able to ping from the laptop. In fact, I run various services in my Desktop at the office (Cygwin/sshd, VNC, etc...) and they all work great. The article talks about the GRE protocol. I'm not sure if it is allow through the Windows Firewall, but I don't know how to check, as it is a network layer protocol. You might make sure the XP SP2 Windows Firewall is configured to allow PPTP
VPN traffic through... http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvanced.JPG http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvancedServices.JPG http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallServiceSettings.JPG When you forward TCP Port 1723 traffic through the XP SP2 Windows Firewall GRE Protocol 47 traffic is automatically enabled. There is a test you can run detailed in the "PPTP Ping" and "VPN Traffic" sections on this page that may help pinpoint the problem. http://www.microsoft.com/technet/community/columns/cableguy/cg0105.mspx Also check the event viewer logs for possible clues... http://www.microsoft.com/technet/support/ee/ee_advanced.aspx -- Show quoteHide quoteAl Jarvi (MS-MVP Windows Networking) Please post *ALL* questions and replies to the news group for the mutual benefit of all of us... The MS-MVP Program - http://mvp.support.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights... <andres***@gmail.com> wrote in message news:1160315070.885771.233360@i3g2000cwc.googlegroups.com... >> Hi Andy, >> First you should configure your Router to allow VPN network connecion and >> allow traffics between your Laptop (client) and Desktop Offce (server). >> Are you able to ping from the Laptop?. >> Have a look at this article: >> http://technet2.microsoft.com/WindowsServer/en/library/0332e37c-61da-44fe-9633-4438d37e19021033.mspx?mfr=true >> HTH. >> Please let us know. >> Regards, >> nass >> ----------- >> www.nasstec.co.uk > > Nass, thank you for your reply. > > My router has VPN traffic enabled (both PPTP and L2TP). I don't think > it has anything to do with it, as I can get the connection to work by > just disabling any of the two windows firewalls and leaving the router > alone. > > I am able to ping from the laptop. In fact, I run various services in > my Desktop at the office (Cygwin/sshd, VNC, etc...) and they all work > great. > > The article talks about the GRE protocol. I'm not sure if it is allow > through the Windows Firewall, but I don't know how to check, as it is a > network layer protocol. > Sooner Al [MVP] wrote:
Show quoteHide quote > You might make sure the XP SP2 Windows Firewall is configured to allow PPTP Thank you for your replies. It looks like it is working now with both> VPN traffic through... > > http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvanced.JPG > > http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallAdvancedServices.JPG > > http://theillustratednetwork.mvps.org/WM2003/PPTP_VPN/LAN/WindowsFirewallServiceSettings.JPG > > When you forward TCP Port 1723 traffic through the XP SP2 Windows Firewall > GRE Protocol 47 traffic is automatically enabled. There is a test you can > run detailed in the "PPTP Ping" and "VPN Traffic" sections on this page that > may help pinpoint the problem. > > http://www.microsoft.com/technet/community/columns/cableguy/cg0105.mspx > > Also check the event viewer logs for possible clues... > > http://www.microsoft.com/technet/support/ee/ee_advanced.aspx > > -- > > Al Jarvi (MS-MVP Windows Networking) > > Please post *ALL* questions and replies to the news group for the > mutual benefit of all of us... > The MS-MVP Program - http://mvp.support.microsoft.com > This posting is provided "AS IS" with no warranties, and confers no > rights... firewalls on. I don't understand why the solution works, but it solved it. I had read similar posts telling me to enable the VPN Incoming connections. What I didn't try was to edit this entrance as Sooner pointed out in one of the links he sent. In my case, the entrance had everything right, except it had the NETBIOS name of the computer insted of the actual IP. I put the IP address in the field and it solved the problem. Thank you very much for all your help Bye |
|||||||||||||||||||||||