HOWTO connect to a XP VNP server

[1432876]

I`m using:

Windows XP pro sp2 (Firewall disabled)
D-link linksys router model: DI-604
Norton Internet Security

Routers Virtual Server List
Name Private IP Protocol Shedule Activated
IPSec 192.168.0.153 UDP 500/500 Allways Yes
PPTP 192.168.0.153 TCP 1723/1723 Allways Yes


When a client tries to connect to the XP VPN server. The Error Message: TCP/IP CP Reported Error 733. When I`ve tried to follow MS solution I still receive the same message. Anoter error message Error 721" error message when you try to establish a VPN connection through your Windows Server-based remote access server. Another client received this Error Message: VPN Connection Error 800: Unable to Establish Connection. All clients are using Win XP OS


The latter one I do not know how to solve.
Here`s my questions:
1. What am I doing wrong?
2. Is there any services that must be started manually before the VPN connection will function?
3. I suspect the problem is with the router. Any Idea for what other configuration i need?
4. Any other Router settings needed?
5. Any settings in Windows XP needed?
6. Anything else?

 

[pmf71]

To my knowledge, XP pro/home does not contain a VPN server... someone please correct me if i am wrong and if so, please let me know where to find it

 

[1432876]

after reading the article At

http://www.chicagotech

below I`m still lookin` for an answer on my question abowe

How to configure Win 2000/XP Pro as VPN ho

"To setup Win XP (in our case) Pro as VPN host, go to the Properties of My Network Places>Create a New Connections>Set up a Advanced Connection>Accept Incoming Connections. On the Devices for Incoming Connections dialog box, do not select any device, only click Next and check Allow Private Connections, and then click Next. On the Allowed Users dialog box, select or add all users for whom you want to enable access. The accounts have to exist on both computers that are involved in establishing the VPN connection. On the New Connection Wizard, File and Printer Sharing for Microsoft Networks, Internet Protocol (TCP/IP) and Client for Microsoft Networks should be listed as networking components. By default, Allow callers to access my local area network and Assign TCP/IP address automatically using DHCP are checked. If you would like to keep the default settings, click Next to continue. Now, the Incoming Connection icon should show on Incoming section under the Properties of My Network Places and is ready to use."

 

[pmf71]

I stand corrected....

 

[pmf71]

As far as your question by the way, i have no experience with the vpn server in XP...

But something you could check into is the MTU size. VPN excrypted packets have extra overhead, which means that the packets are slightly lager than normal. So in your router check the MTU size and make the value 5-10% larger and check if that works.

 

[1432876]

Yesterday I upgraded the firmware in the router. After that I received the Error 800 when trying to connect from a client"

When you say MTU, you are talking about window size in the TCP handshake on port 1723? But would it be relevant, considering the section below?

The faq`s about the router states as following:
the DI-604 supports VPN (PPTP pass-through and IPSec pass-through). The DI-604 supports multiple concurrent VPN sessions

Since the router operates with pass-through, then the size shouldn`t matter? It`s the MTU size on the server that should have been changed (if needed)?

Still it seems to me that it`s the connection to the router from a client that fails.

Correct me if I`m wrong, or if you have any other good Idea of solving this problem.

 

[1432876]

Ok, I believe it was the Norton firewall wich gave me the 800 error.
Now when that is in order, I receive the error 628.
Therefore I wondoer. Is there any configuration needed to be done in the IP-securitypolicies on local machine? Or any other configurations in Windows XP pro to allow L2tp/IPSec or PPTP work properly? Remember the Machine is ment to work as a server.