Assistance setting up Win 2k server VPN

[sab4you]

Inside our LAN I have a windows 2000 server with the IP 192.168.1.104

My router is configured to forward port 1723 to this IP address.

I have setup the VPN and can connect to it inside my LAN, but any attempts outside the LAN do not work. I have contacted my router manufacturer and they state everything is setup correctly.

So I am really left with what did I setup wrong in windows 2000?

I have a domain controller as a different computer and allowed users to have dial in access.

I am pritty sure I simply am not configuring the routing and remote access properly for external connections. I have tried one and two LAN card configurations but dont get anywhere.

When I attempt to connect from outside I always connect (and see the IP in the netstat list) but it always tells me the computer is not responding.

Can somebody give me step by step instructions (or great link) on how to setup a VPN server with a windows 2000 server on a domain?

 

[sab4you]

To update:

From a local LAN connection I can VNC into the server.

192.168.1.102 -> 192.168.1.104

and it creates a VPN conenction.

But, when I attempt to connect to our internet public IP (which forwards 1723 to 192.168.1.104) it fails to connect.

While it is attempting to connect, I can netstat on 192.168.1.104 and it shows the inbound connection attempt.

Assuming my router is setup correctly - what could I have done wrong with setting up the win2k VPN server so it doesnt take internet connections?

 

[pijudo25]

Have you tried to forward port 47 along with 1723?

 

[sab4you]

No..that seems to be the common misconception with VPN

Its not port 47 its a protocol 47 (GRE)

it still transfers on port 1723

According to my router manufacturer they looked at my router settings and its supposedly all good.

 

[sab4you]

SOLVED

Posting results in case others have same problem.

Turns out my MTU was set too high. For these types of connections lower your MTU to 1480.

Worked no problem with this stupid, simple change.

 

[techguru916]

change the mtu where? at the router, server, or client?