I created the connections (vpn server = win win2k pro and clientes in xp pro and win2k pro) but in none of the cases in can connect to my vpn server. I can ping the server ip but when connecting I get error 687 from win2k and error 800 from win2k. I don't have gateways or firewalls, just the pcs in different locations. I have created the user accounts to connect to so that is not the problem. What is it? Please I really need help, my boss is boss is about to kill me. I have to set this thing up 'til tomorro because he is going on a trip and have to set it up on his notebook.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
VPN
- Thread starter zmileta
- Start date
ChicagoTechNet
MIS
this may help. quoted from
Error 800: Unable to establish the VPN connection. The VPN server may be un-reachable, or security parameters may not be configured properly for this connection.
Resolutions:
1) if you have firewall, open TCP Port 1723, IP Protocol 47 (GRE).
2) make sure you can reach the VPN server by using ping. Sometimes, poor connection can cause this issue too.
3) You may need to updated firmware on a router or firewall if other OS (win9x/nt/me/w2k) works except XP.
4) The VPN server may not be able to get IP from DHCP for the VPN client. So, you may want to re-configure VPN host networking settings. For XP pro VPN host, go to the Properties of the VPN>Network, check Specify TCP/IP address and Allow calling computer to specify its own IP address, and uncheck Assign TCP/IP addresses automatically using DHCP.
5) Make sure other secure software blocks your access, for example, if you use Norton secure software, you may need to add the remote client's IP so that the client can access.
Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at
Error 800: Unable to establish the VPN connection. The VPN server may be un-reachable, or security parameters may not be configured properly for this connection.
Resolutions:
1) if you have firewall, open TCP Port 1723, IP Protocol 47 (GRE).
2) make sure you can reach the VPN server by using ping. Sometimes, poor connection can cause this issue too.
3) You may need to updated firmware on a router or firewall if other OS (win9x/nt/me/w2k) works except XP.
4) The VPN server may not be able to get IP from DHCP for the VPN client. So, you may want to re-configure VPN host networking settings. For XP pro VPN host, go to the Properties of the VPN>Network, check Specify TCP/IP address and Allow calling computer to specify its own IP address, and uncheck Assign TCP/IP addresses automatically using DHCP.
5) Make sure other secure software blocks your access, for example, if you use Norton secure software, you may need to add the remote client's IP so that the client can access.
Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at
- Thread starter
- #3
thanks,
but I'm not using firewalls, all I have is the router/adsl, a switch for my network and the pcs, I' setting one of the machines to be the vpn server. do I need to put one pc directly to the adsl router as a server in order to put the vpn to work
but I'm not using firewalls, all I have is the router/adsl, a switch for my network and the pcs, I' setting one of the machines to be the vpn server. do I need to put one pc directly to the adsl router as a server in order to put the vpn to work
Have you configured your router to route all VPN related traffic to your vpn server? ChicagoTechNet has mentioned the ones required for PPTP. Also, you need to assign IP addresses, again as mentioned previously. Do you have a DHCP service setup or do your laptops have the IP address put in there manually for the VPN connection? Note that this IP address/subnet needs to match that of your VPN site.
Claudius (What certifications??)
Claudius (What certifications??)
- Thread starter
- #5
no, my router was given to me by the ISP company, they have blocked it so no configuration can be made. all the machines have dynamic IP addresses because of the router but the router have a static public ip address, the same with the othe side.
- Status
Similar threads
- Locked
- Question