Windows VPN through MAS server gateway firewall.

[StardataMitel]

Hi All,

We have just set up a MAS at version 2.0 in server gateway mode for a teleworker solution.

This is now the business's gateway for all internet services. We have copied the firewall settings from the previous router to the port forwarding form on the MAS. The usual suspects ie. 25, 80, 443 etc. All seem to be working a treat.

The one we are having problems with is 1723, VPN - PPTP.
It seems to be allowing the packets through to connect but wont allow authentication of the VPN account.

Someone has suggested something to do with packet filtering or protocol 47? (cant find info on this)

Has anybody had the same issue? Is it fixable?
I've got them back on the old router till i find a solution, which is obviously holding up the install.

 

[dryaquaman]

I would assume you are connecting to something internally. I've frequently used the MAS/TW server to be our PPTP. It's pretty simple to set up users and PPTP directly to the MAS server.


But neverless, I pulled this from compnetworking.about.com/od/vpn/l/bl012101a11.htm

PPTP uses IP protocol 47, designed for "General Routing Encapsulation" or GRE packets. A common mistake in configuring firewalls for use with PPTP is to open PPTP port 1723 (allowing connections to be established) but forget to forward GRE protocol type 47 (denying port data from passing through the tunnel). Some operating systems include "PPTP ping" utilities (pptpsrv and pptpclnt in Windows 2000) that verify both PPTP ports are opened.



Hopefully that helps.
Dry Aquaman