VPN Problems with Netopia Router (3386-ENT) 2

[ad73]

I have a Netopia 3386-ENT router. Our ISP i called Telus (Canada). We are connected to the internet, but I cannot properly get VPN to work, from a Windows Client to the Netopia. I have followed the instructions on the website support, and still get error #619 on the client side.
"Error 619: A connection to the remote computer could not be established so the port used for this connection was closed...."
On the Router side the following WAN event history appears when trying to connect:
05/22/09 14:00:16 PPTP: IP down, rem: 204.191.24.XX
05/22/09 14:00:16 PPTP-1 down: Remote clearing
05/22/09 13:59:46 PPP: Channel 1 up, Answer
05/22/09 13:59:46 PPTP: IP up, rem: 204.191.24.XX, via: 204.191.24.XX

In each case the "XX" indicates the same numbers. I tried to follow all of the instructions for setting up PPTP VPN as per the Netopia support articles: "VPN PTP Client for Windows" and "Notice on Configuring VPN tunnels with Netopia Routers. But still not change. Can youy please help me. Before installing this Router, we had a Netopia R9100, that was configured and ran VPN perfectly. I have not been able to confirm for 100% that the settings are the same for both, as the R9100 is DOA, but I saved my config notes for the R9100, and have followed these to the tee. Can anyone please help me.

Thanks
Arif Dhalla

 

[North323]

is the netopia being used in router mode or bridge mode? does the ISP block vpn traffic?

 

[ad73]

Thanks for the response North323.

The Netopia is in Router Mode - it is our primary gateway connection to the internet.

Accoriding to the ISP, they do not block VPN Traffic. We have the same ISP as we had before we switched to the 3386-ENT model (ie, when we were using the R9100 model) and we were able to VPN just fine.

One quickk question (as an aside to this). I m testing the VPN from the same LAN that I am trying to VPN to. I didn't think this was an issue (I also tested it from home and got the same type of messages), but do you know if that is causing any additinal problems. My apologies in advance, I am not very proficient with networking in general.

Any additional thoughts would be welcome. Thanks in advance.

 

[North323]

you will not be able to connect to the VPN while on the same subnet. Do you have access to the netopia router? can you post a scrubbed config?

 

[burtsbees]

Au contraire, mon frer...you can INDEED have the vpn pool of addresses residing in the local LAN pool. Simply deny those address from being NATted, and you're good...

For example:
LAN=10.10.10.0/24
VPN pool=10.10.10.1-10.10.10.7

In a Cisco router...

access-list 103 deny ip any 10.10.10.0 0.0.0.7
access-list 103 permit ip 10.10.10.0 0.0.0.255 any

ip nat inside source list 103 int fa0/0 over

/

 

[North323]

very interesting...i guess i never thought of that.