VPN connection error 721

[jjkjjkjjk]

My company is running SBS2003 behind a linksys router. PPTP passthrough is enabled, and ports 1723 and 47 are forwarded to the server. "VPN Remote Access" is the first policy in Routing and Remote Access. The two policies presently there are

"NAS-Port-Type matches "Virtual (VPN)" AND
Windows-Group matches "domain\SBS P User Templates;domain\SBS Mobile Users"

, both set to grant remote access permissions.

I've set up a VPN connection on several of my coworkers' laptops, and they seem to connect normally until I get to "Verifying username and password...", when I get the error, "Disconnected. Error 721: The remote computer did not respond." I am certain that the username and password are correct; it seems almost certain to be a problem with the server configuration. The big man must go out of twon in a couple days, so any help you can provide would be most appreciated.

 

[GVN]

I would remove any policies, or test with a fresh account with no policies applied against it, get it to VPN sucessfully, then worry about applying policies on it after you've verified that the system works first.

GVN

 

[VPNSteve]

I always, always check to see if it's a router problem first. Remove the Linksys router from the picture and see if the users can connect. I think you will find that they can.

 

[VPNSteve]

Also, you don't need to forward port 47. PPTP doesn't use port 47, it uses IP Protocol 47 (Generic Routing Encapsulation). If you're using NAT, your router needs to support that protocol (I doubt this is your problem).

 

[TimK01]

Just had a similar situstion with a similar setup. I found that our ADSL router would not let the GRE encapsulation on port 47 through. Had to replace the router and it works fine. I was getting event log entries talking about GRE from the RasMan service.

 

[jjkjjkjjk]

So after messing with way too many settings, I upgraded my router's (WRT54GS) firmware to the most recent release and the VPN magically began to work!

Why this wasn't one of the first things I tried, I will never know.

 

[ms1mm0]

I had as similar problem and messed around with Port forwarding - but you don't need to. The anwer is "port triggering". Find out the port settings on your VPN server. For example if the source and destination and 500 and 4500 do this....

Log on to your router.

Click "Gaming and Applications" section.

Click "Port Triggering".

Then enter an app name (any thing you like) in the application field.
In each of the four port fields enter 500 and tick enable
Do the same for 4500 or what ever the other port number is on your VPN server.

That should do the trick. No need for static IP addresses or any thing out of the ordinary.

Good Luck

Mark.