Some guidance for first VPN Setup between 2 XP Pro PCs please?

[DragonQ0105]

Hi, didn't even know there was VPN Forum! lol.

I've been looking for internet guides for this, but most seem really basic and it just isn't working for me...

Here's the situation (PC1 = XP Pro SP2, PC2 = XP Pro XP2):

- Trying to test a VPN Connection over these PCs over the Internet. Both have 1Mbps Cable Connections to Blueyonder.
- Both PCs have "allow Remote Connections" enabled in System Properties.
- Both PCs have a Network Connection "Incoming Connections", both set up with the same default options.
- Both PCs have a Network Connection "Other PC", which connects to the other PC obviously. The IP Addresses are correct, and the Username/Password combination is the same on both PCs.

Here's what happens:
- PC1: Try to connect to itself (Get incorrect password error if using blank username/password, get Error 733 - TCP/IP Protocols incorrect - when using correct password. [So I know the username/password is correct])
- PC1: Try to connect to PC2 (Error 800 - Cannot connect to VPN Server)

So the Username/Password combination is fine, but I cannot connect to the other PC! I'm trying to do this to setup a VPN for Remote Desktop, but it just won't connect, and the IP is fine!

Any ideas please?

 

[LloydSev]

I'm assuming you are on a broadband connection..

Do both routers have VPN capabilities? IPSec Passthrough and PPTP Passthrough?



Computer/Network Technician
CCNA

 

[DragonQ0105]

I'm not sure. They both have identical 1Mbps Blueyonder Connections....and both use External USB Modems.

Not sure about their capabilities...here's what the Webstar website says (although this is a general FAQ - they don't have one for each Model):

http://www.scientificatlanta.com/products/consumers/webstar_features.htm

PC1 has a "WebStar 100/200 Series" Model. The Online User Manual for these mention nothing about VPN, IPSec or PPTP.

PC2 has a "Motorola SURFboard SB5100" Model. The only user guide is a quick-start guide and their specifications do not mention VPN, IPSec or PPTP either.

PC1 got the connection about 2 years before PC2, so has the older Modem.

 

[LloydSev]

http://www.homenethelp.com/vpn/

Computer/Network Technician
CCNA

 

[DragonQ0105]

That page kinda sucks...no clear links...

The tutorial says you need a VPN Broadband Router...is this true? In the microsoft tutorial-type document, it never mentions any equipment except a Cable Modem, preferably with a Static IP Address. Plus, that website doesn't use XP's built-in WPN Client software....so it's not very useful.

Is there any help anyone can give please? I've emailed Webstar about their Modem and VPNs, but as of yet I've had no reply...

 

[DragonQ0105]

(Sorry for double-post) I found this website, which says you only need two Windows XP Pro PCs....nothing about a router or anything. I have done exactly what this article describes, and more (e.g. enabling Remote Access)...but...nothing.

http://www.windowsdevcenter.com/pub/a/windows/2004/03/09/vpn_connection.html

 

[LloydSev]

You must understand that what that article is talking about is a device using NAT. Effectively you have a cable modem that acts as a router right now, as it performs NAT for up to 31 seperate devices. Your cable modem does NOT support IPSec or PPTP pass-through and therefore that article does pertain to you.

Computer/Network Technician
CCNA

 

[DragonQ0105]

So it's impossible to link these 2 PCs via VPN for Remote Desktop?

 

[LloydSev]

Using your current cable modem? Yeah.

Computer/Network Technician
CCNA

 

[DragonQ0105]

Poo. I managed to get the connection to work (no more Error 800), but still get Error 733 during the "Registering on Network" stage...tells me to check my TCP/IP Settings

Oh well I guess I can't do it.

 

[LloydSev]

Just as a note, make sure your networks aren't in the same address range..

If yours is 192.168.0.0, make sure the other network is 192.168.1.0 .. worth at least a shot if you got it that far.

Computer/Network Technician
CCNA

 

[pmf71]

The fact that Dragon mentioned that they are external usb modems, indicates that no NAT is present on either connections. They're directly connected to internet. The only problem you could be facing is the firewalls installed. The ports needed for the VPN solution must be open on both machines.

 

[DragonQ0105]

But both use the Windows Firewall, with Accept Incoming PPTP Connections Enabled, and Port 1723 open on both PCs....but I've read that you also need "IP Protocol 47 (GRE)" Enabled....how would I do this? I cannot find any special seetings for either modem in Device Manager or anything....

Also, will manually assigning an IP to the incomming connection help at all? Currently, it's on DHCP Automatic.

 

[DragonQ0105]

Just found something about the Motorola SB5100, from a FAQ:

Qo Motorola SURFboard cable modems support VPN connections?
A: Yes. The modem can be used with VPN connections.

Hmmm...so this implies it has all of the PPTP capabilities etc. required...but I can't find any info on the other modem. If the Motorola one supports VPNs, does this mean it can be a host and the other PC be a client? Or do both PCs need modems with VPN Capabilites?

 

[DragonQ0105]

OK, a min-breakthrough...sort of

On PC1 (the one with the WebStar Older Modem), I have managed to successfully connect to itself (basically, just connect to it's own IP Address). I did this by making the IP Address Assignment set to Manual rather than Automatic.

I'm going to sleep now, but tomorrow, I'll try using a manual IP Address to try to get PC2 to connect to PC1 too.