VPN - Outlook XP - Exchange

[idemoya]

I have an Exchange 2000 server running on windows 2000. I have a client that is running Windows XP Professional and Office XP SBE. My VPN connection is established thru a VPN concentrator.

After connecting thru the VPN I can browse the network without a problem. I can ping any computer on the LAN via IP address or name including the exchange server without a problem or delay.

But when I attemp opening Outlook (Exchange) it hangs and asks to rety, work offline, or cancel. Sometimes after hitting retyr several times it works, but not always.

Any Ideas?


Thanks

 

[Zelandakh]

Is the VPN tunnel allowing all ports through?

Or try an lmhosts and a hosts file locally configured with ip for the email server and see if that cures your prob.

 

[idemoya]

I attempted making the changes to the LMHOSTS and HOSTS file and that also did not work. What does not make sense to me is that once the connection is made you can ping the server by name with excellent response time.

Thanks

 

[dazz828]

I am having the same exact problem, and still no solution after weeks of trying. Did you ever get this fixed yet?

 

[Marcs41]

It sounds more like a DNS or default gateway problem. A ping does not mean anything, just that you can see it. You can ping the entire internet but that would not mean you can connect to all servers.
Ping by internal servername to see it that works, that will prove the DNS working. The solution is out there.

 

[dazz828]

i can ping my internal server, i have dns setup correctly, lmhosts, and host file resolve all internal names. it prompts for user/pass/domain and verifies it correctly. (if i enter wrong pass it tells me). once i hit ok, sits there loading FOREVER. if i hit cancel you can see some folders but no messages. "requesting data....." dialog box. still can't get it to work. i tried it from another location & it works great. i think it may be my linksys router with built-in firewall. does anyone know of all the ports needed to be opened & mapped? i've tried MSKB and opened all ports it says but same thing.

 

[Marcs41]

If you have a firewall and connect through VPN, there is no need for ports. You are going throught the VPN tunnel.
Recheck your inheritted settings, including WINS, AFTER the VPN is established. The solution is out there.

 

[dazz828]

marcs,
thanks for the info. i kind of figured you didn't need ports opened because of the secure tunnel that is established. but it's pretty strange, every location works with this setup great. but for some reason from my house it just sits at "requesting data..." if it even opens that far.
dns, wins, ip, everything matches up. i even played with removing dns, lmhost, host files. the only difference between all the locations & my house is that i have a linksys 4port/wireless router. i updated the firmware to the latest update but still no luck. thanks for your help so far!

 

[VOIPeng]

Has this PC been able to connect to Exchange fron within the office? Or is this a home PC and this is not possible, because if you can bring it in and it works fine, it is definitely a problem with the VPN filtering ports. Thank you,
Frank Mirecki

 

[dazz828]

Yeah it's my home PC, as soon as i take the Linksys router off it works, put it back on and no go. I need the router for the wireless laptop & also to share with 3 other computers. I have checked Linksys & they told me it should work without ports since it runs threw the VPN tunnel. Thanks still no luck!

 

[Marcs41]

O, that's because your router is a NAT router, VPN will not work through NAT.
You will have to configure your router to passthrough aal VPN required ports. The solution is out there.

 

[VOIPeng]

Does your VPN work when connected to the Linksys Router? Can you ping internal servers? Can you see a server share? Thank you,
Frank Mirecki

 

[dazz828]

Yeah that's the strange thing. Behind the router, the VPN connects, authenticates, and creates the tunnel no problem. I can ping all servers & exchange server by IP & name (lmhosts). I can even setup my Exchange account, check name, etc. Then when I launch Exchange it asks for name/pass/domain. I hit OK.. & it just sits...... "requesting data...." for hours. If I type a wrong password it tells me, so it's authenticating Ok. Take away Linksys router & it works perfect. I have tried opening & forwarding all known ports for Exchange, even putting my machine in the DMZ zone. No luck! I checked on Linksys's boards & alot of people seem to be running into the same problem. I've tried upgrading & downgrading firmware but nothing. Thanks for the help so far..

 

[VOIPeng]

Well it's definitely something to do with the Linksys Router, it's definitely filtering or blocking something that Exchange is looking for.

Here is a link to all the ports that MS Exchange 2000 Server requires to an Outlook client:

http://support.microsoft.com/default.aspx?scid=kb;en-us;q278339

Thank you,
Frank Mirecki

 

[dazz828]

Thanks! Unfortunately the LinkSys router only let's you open 10 ports, I tried what looks like the most important ports but no luck. I also tried DMZ zone, nothing. I also tried opening & forwarding every port 1-65xxx just for the heck of it but not luck... ahhhh Linksys is about to go on ebay! Didn't have this problem with my old one, but I needed the wireless. Thanks guys

 

[bhouterman]

I have had the same kind of trouble, users were able to ping the exchange server just fine over the VPN, but most of the time outlook would not synchronize properly.

You might want to try to add the following registry key on the client, it looks like it fixes the problem:

HKLM\System\CurrentControlSet\Services\Tcpip\Parameters
DWORD: EnablePMTUBHDetect=1

After adding the registry key you need to reboot for the setting to take effect!

 

[dazz828]

Thanks I will try that out right now & let you know.. thanks man.