Netscreen 5XP & Windows 2000 Terminal server

[itbizz]

I have a problem connecting to a terminal server via a VPN connection between 2 Netscreen 5XP's. From some locations I can connect and from other locations not. When I move a computer to a location where the connection works I can connect so the configuration of the server and the computer are fine. When I try to connect I receive a connection timeout. I can ping the Terminal server by IP-address and by name. What could be the problem?

 

[penauroth]

I had a 5xp to 5XT VPN that had the same problem until I configured traffic shaping in the VPN policies on both netscreens. Give that a try and try again.

P

 

[nobeta]

I have had similiar problems with VPN and Terminal server. I have usually resolved this by setting MTU size on the problem PC to 1400. Sometimes you have to add registry settings for PMTU discovery and PMTU (BLACK HOLE) detect. Check out the DR.TCIP Utility at this site

http://www.mvsforums.com/tools.html.

It makes editing these keys rather easy. I would start by lowering the MTU size for the network card on the problem computer to 1400. If you still have problems try enabling Balck Hole Detection.