Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

secure tcp/ip

Status
Not open for further replies.

megzzz

Technical User
Apr 6, 2007
5
AU
Hi
I am trying to run a program we use at my work on my laptop, the program has been installed and works fine using a vpn connection from my workplace. However, once i brought the laptop home and plugged it into my modem, connect the vpn and try to connect to the program it says that a secure tcp/ip may not be available on this machine/port.
Any help would be greatly appreciated as i need to complete this work asap!
thankyou in advance!
megan
 
Are you sure that the application is actually using the VPN when it is connected at your workplace? Generally VPNs allow connections from a computer on an unprotected network to connect with computers on your protected network. If you are at work and connected to the protected network, then even if the VPN establishes a tunnel, the server is likely on the same subnet as the computer and the connection would likely be established on the local network rather than through the VPN.

One of the firewall issues that I have seen frequently with VPNs and SOHO routers is not allowing IP protocol 50 (IKE). This is not TCP or UDP port 50, but IP protocol 50. Without this, many VPN clients cannot exchange keys with the VPN server at the remote end. Another frequent problem is not opening up port 1723/tcp, which is used by PPTP (Microsoft VPN).

You will probably get a more specific answer if you are more specific about the configuration that is being used, such as: Are you using NAT on your home network? Which VPN client are you using? What VPN protocol are you using (IPSEC, PPTP, SSL)?

You can look at your routes the next time you are at work and establish the VPN using the "route /print" command. Compare that with the same command when you are attempting to establish your connection at home, just to verify that the VPN has not actually been established. You can post that information here, but don't forget to sanitize the IP address information that may be sensitive.


pansophic
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top