Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

VPN help GRE packets

Status
Not open for further replies.

ssphoenix

IS-IT--Management
Jan 22, 2001
306
US
Hi there,

I've made the proper vpn connections from a small office to our main office. I can ping from the office to VPN server. I've created the vpn connection but I am getting error 678 before the connection is establised. I've looked at the port 1723, GREs, and PPTP on routers, firewalls in between the two office and everything is open.

Is there anything else I might have missed? Again, I can ping fine between the two offices. As a test I've ran PCanywhere and works fine. However, I need vpn to run the login scripts.

Thanks in advance.

 
sound like you have a routing and remote access problem on the VPN server. Using PcAnywhere and pinging are not very good tests because they don't force the vpn server to pass encrypted data to the domain controller or radius server.

Check the RRAS config.
 
are you sure you are allowing GRE ? Not all firewalls can pass this type of protocol. it's not a TCP or UDP port, but really a IP protocol.
If you set up a network monitor, you should see this type of packets when establising PPTP :

First, the session is started with PPTP Start Session Request, and a Start session reply back,
then a PPTP Outgoing call request, and replied with a PPTP outgoing call reply
Then, a PPTP Control Packet : Set LInk info

After establishing, PPPCHAP packets travel to verify the user
and after authentication, you will see the GRE packets.
If you can't see GRE, then your firewall blocks it...

good luck ---------------------------------------------------------------------
I have not failed, I've just found 10,000 ways that don't work
---------------------------------------------------------------------
Peter Van Eeckhoutte
peter.ve@pandora.be
*:->* Did this post help? Click below to let me know !
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top