NT VPN via Linksys for Win98 Client

[csjoseph]

Any help on this topic would be greatly appreciated. I'll try to lay it out for you.

We have a NT 4.0 sp6a server running RRAS for VPN. The server has two NIC's.
192.168.100.1 - Internal network.
192.168.101.100 - External, connects to LAN port on router.

Using a Linksys BEFVP41 router. NAT enabled. PPTP Pass through enabled. Port 1723 forwarded to ip 192.168.101.100.

When I try to connect on the client, it says 'verifying user name and password' then I get a error # 650. 'the computer you're dialing in to does not respond to a network request'. I am baffled, I have tried many diferent configs on the router and am stumped.

I did plug straigt from laptop to hub to VPN server and was able to make a connection. SO I know the service is working.

What do you think? Chris
cjoseph@hdii.com

 

[sobak]

Chris have you checked to make sure the security settings match? I'm far from an expert when it comes to PPTP but I know when I setup my Cisco VPDN solution it was the security mismatch that was causing me problems.

david e
*end users are just like computers, some you can work with...others just need a simple reBOOTing to fix their problems.*

 

[csjoseph]

Security settings on which devices? The PC and VPN server match because when I bypass the router and do it straight through a hub I can connect.
Chris
cjoseph@hdii.com

 

[ScottCudmore]

Hi,

Try adding in a Port forwarder for port 47 too.

Scott

 

[sobak]

Oops sorry I didn't read that part....

I would try what Scott is recommending to see if that works for you. david e
*end users are just like computers, some you can work with...others just need a simple reBOOTing to fix their problems.*

 

[csjoseph]

But it is not really port 47 is it. It is a completely different protocol. GRE #47. And on my router you can only forward, TCP and UDP. But I will give it a try. Chris
cjoseph@hdii.com

 

[jcostanz]

make sure you have the pptp pass thru enabled on the router

 

[csjoseph]

I do. Read the post before you answer, you are wasting my time. Chris
LAN Admin / Programmer
cjoseph@hdii.com

 

[Guest_imported]

Put your .100 in the DMZ. This will eliminate the possibility of a port assignment problem.

 

[csjoseph]

I have tried the DMZ, same result. I have also had it up to here with Linksys support. They are morons. Thanks for all the input but I returned the Linksys and am seeking other solutions. Chris
LAN Admin / Programmer
cjoseph@hdii.com

 

[Guest_imported]

OK:

Why are you using NAT on the NT box, then running the wan side of the nt box into the lan side of another NAT router?

You're going Nat to Nat. This will not work. two nat routers in series will screw up RPC's. Pick a Nat router, either the nt box or the linksys.

Since NAT on the NT box will already protect your internal private network, screw using the linksys. Set the Wan card on the NT box to DHCP and try it.

Note: when using NAT, it is impossible for an external ip address (ie internet) to initiate a connection to your internal network unless you specify a NAT route mapping to an internal interface).

Does this help?

 

[Guest_imported]

I may have been barking up the wrong tree -

I assumed you had NAT running on the NT box because you said you had internal and external NIC's on the box.

192.168.1.100 is internal too ie. non-routable. Are you trying to run NAT on the NT box? If so, why translate one private address range to another?

cryogen3@hotmail.com

 

[csjoseph]

No NAT on the NT box. Only on the router. Chris
LAN Admin / Programmer
cjoseph@hdii.com

 

[Guest_imported]

To Chris:

As long as you are using a Linksys device, PPTP will never work. I have worked with 4 different models from them, and worked extensively with their tech support people on this issue for clients of mine. They finally gave up, and so have I. One tech admitted to me that they have a problem with their firmware implementation for PPTP, and just haven't figured it out yet. This was also nearly a year ago, and still no change (I just recently tried a brand new BEFSR41 for the hell of it, and same results). I hate to put down any hardware vendor, but if you are looking for a low end, inexpensive firewall, get yourself a product from Netgear. I have used every single one of their devices and never had a single problem. The RP-311 works great. Just be careful you don't pick a model that restricts usage by number of MAC's on the network...you have to purchase more licences and it can get to be a pain. Hope this helps.

Garrett Scroggin
Systems Engineer

CVM, Inc.

http://www.cvm.com

gss@cvm.com

 

[Guest_imported]

and that my friend is the answer. i have searched the web and had numerous tech support calls. do not reccomend this router/linksys to any clients who want pptp.

netgear.

ditto again.

 

[Guest_imported]

Strange. I just purchased a Linksys BEFSR41 Etherfast 4-Port Cable/DSL Router and it works fine with our Win2K PPTP VPN. Our VPN server is NAT-ed (not PAT) behind our PIX and the the Linksys is obviously PAT-ing the home users LAN.