Set up VPN, Win2k, Linksys BEFSR41 router

G

Guest

Guest
Archived from groups: comp.dcom.vpn (More info?)

I'm having trouble getting a VPN to work with my router and win2k and am
wondering if somebody here can tell me what I am doing wrong.

What I did:

On the router, enabled port forwarding:

Ipsec, port 500 to 500, TCP and UDP, to my machine's IP (192.168.1.88)
PPTP, port 1723 to 1723, TCP and UDP, to my machine's IP (192.168.1.88)
GRE, port 47 to 47, TCP and UDP, to my machine's IP (192.168.1.88)

IPSEC and PPTP pass through are both enabled.
Block WAN request is enabled.
Multicast Pass through is disabled.

On my workstation (win2k pro) I created a new network connection by
selecting "accept incoming connections", and so forth. I have an account on
my machine with limited priveleges for use with the VPN.

When I try to connect locally over the LAN using the 192.168.1.88 IP
address, everything works fine. But when I try to connect from home using
the static IP of the router, I get error 721.

Am I making a minor mistake or am I totally unclear on the concept?

Thanks in advance.
 
G

Guest

Guest
Archived from groups: comp.dcom.vpn (More info?)

I'm a novice so buyer beware OK? Have you tried to ping router website? I
did that,could not connect. After two days of phone calls senior tech said I
had bad router. New one on way. Linksys NR041 is my model. Loren (Just
another thing to chk)
"Yair Sageev" <geekyheeb-news@yahoo.com> wrote in message
news:hEMsc.18766$rb.9193@nwrdny03.gnilink.net...
> I'm having trouble getting a VPN to work with my router and win2k and am
> wondering if somebody here can tell me what I am doing wrong.
>
> What I did:
>
> On the router, enabled port forwarding:
>
> Ipsec, port 500 to 500, TCP and UDP, to my machine's IP (192.168.1.88)
> PPTP, port 1723 to 1723, TCP and UDP, to my machine's IP (192.168.1.88)
> GRE, port 47 to 47, TCP and UDP, to my machine's IP (192.168.1.88)
>
> IPSEC and PPTP pass through are both enabled.
> Block WAN request is enabled.
> Multicast Pass through is disabled.
>
> On my workstation (win2k pro) I created a new network connection by
> selecting "accept incoming connections", and so forth. I have an account
on
> my machine with limited priveleges for use with the VPN.
>
> When I try to connect locally over the LAN using the 192.168.1.88 IP
> address, everything works fine. But when I try to connect from home using
> the static IP of the router, I get error 721.
>
> Am I making a minor mistake or am I totally unclear on the concept?
>
> Thanks in advance.
>
>
>
>
>
>
 

Jason

Distinguished
Jul 25, 2003
1,026
0
19,280
Archived from groups: comp.dcom.vpn (More info?)

Yair Sageev wrote:

> I'm having trouble getting a VPN to work with my router and win2k and am
> wondering if somebody here can tell me what I am doing wrong.
>
> What I did:
>
> On the router, enabled port forwarding:
>
> Ipsec, port 500 to 500, TCP and UDP, to my machine's IP (192.168.1.88)
> PPTP, port 1723 to 1723, TCP and UDP, to my machine's IP (192.168.1.88)
> GRE, port 47 to 47, TCP and UDP, to my machine's IP (192.168.1.88)

GRE is not port 47; it is IP protocol 47. Generally these consumer
router devices don't give you enough control to forward entire protocols
like that. You may be able to set your machine as the DMZ and get it
to work, but i wouldn't be surprised if you just won't be able to accept
incoming MS PPTP VPN connections. The PPTP passthru that the router is
referring to is meant to be outgoing (VPN client is behind the router on
your LAN side, VPN server is out on the internet somewhere).
 
G

Guest

Guest
Archived from groups: comp.dcom.vpn (More info?)

Thank you, I didn't realize that the passthrough was outgoing only.


"Jason" <54235432@truedesign.org> wrote in message
news:40bec823$0$187$c3e8da3@news.astraweb.com...
> Yair Sageev wrote:
>
> > I'm having trouble getting a VPN to work with my router and win2k and am
> > wondering if somebody here can tell me what I am doing wrong.
> >
> > What I did:
> >
> > On the router, enabled port forwarding:
> >
> > Ipsec, port 500 to 500, TCP and UDP, to my machine's IP (192.168.1.88)
> > PPTP, port 1723 to 1723, TCP and UDP, to my machine's IP (192.168.1.88)
> > GRE, port 47 to 47, TCP and UDP, to my machine's IP (192.168.1.88)
>
> GRE is not port 47; it is IP protocol 47. Generally these consumer
> router devices don't give you enough control to forward entire protocols
> like that. You may be able to set your machine as the DMZ and get it
> to work, but i wouldn't be surprised if you just won't be able to accept
> incoming MS PPTP VPN connections. The PPTP passthru that the router is
> referring to is meant to be outgoing (VPN client is behind the router on
> your LAN side, VPN server is out on the internet somewhere).
>