Home > IT Answers > Security > VPN connection problem from WinXP to Windows ...
Help

Question

  Asked: Dec 26 2004   8:15 AM GMT
  Asked by: JuhaTa

VPN connection problem from WinXP to Windows Server 2003.


Security management, Auditing, Tech support, Servers, Remote users, Networking services, DHCP, DNS

I have configured a Windows Server 2003 to accept incoming VPN-connections behind a firewall. The firewall forwards port 1723 to the server. When I try to connect with a WinXP Pro desktop via the internet (the server has a public IP at the firewall), I get an errormessage (number 691) that the server does not recognize the user or password on the server. The server has AD installed and I've tried to use the users full AD-name at login, but still it doesn't recognize the user. I get the following in the VPN-log:

192.168.0.100,Testdomain.localVpnuser,12/20/2004,14:05:09,RAS,VPNSERVER,44,47,4,192.168.0.100,6,2,7,1,5,134,61,5,64,1,65,1,31,192.168.0.3,66,192.168.0.3,4108,192.168.0.100,414 7,311,4148,MSRASV5.20,4160,MSRASV5.10,4159,MSRAS-0-Vpnuser2,4155,1,25,311 1 192.168.0.100 12/16/2004 12:32:35 18,4129,Testdomain.localVpnuser,4130,Testdomain.localVpnuser,4127,4,4136,1,4142,0
192.168.0.100,Testdomain.localVpnuser,12/20/2004,14:05:09,RAS,VPNSERVER,25,311 1 192.168.0.100 12/16/2004 12:32:35 18,4127,4,4130,Testdomain.localVpnuser,4129,Testdomain.localVpnuser,4154,Anvand Windows-autentisering for alla anvandare,4155,1,4136,3,4142,16

Have any clues to how to solve this problem?

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window
Help

Answer Wiki (Improve, edit or add to this answer)

IMPROVE THIS ANSWER
View History
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
Last Answered: Dec 26 2004  9:20 AM GMT  by mraslan




It seems that you are working with PPTP
make sure that your firewall is also passing GRE traffic its IP protocol 47, its not TCP port, its an IP protocol number, for example TCP is IP protocol 6, UDP is IP protocol 17
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Security, DataCenter and Mobile.

Looking for relevant Security Whitepapers? Visit the SearchSecurity.com Research Library.


RSS - Discussions Help

Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

bobkberg  |   Dec 26 2004  3:48PM GMT

Also, make sure that the user’s AD permissions include Dial-Up/Remote access.

Bob

 

JuhaTa  |   Dec 27 2004  8:30AM GMT

Thank you for your help. AD permissions should be ok, but I’ll check if the firewall passes protocol 47. It’s made for VPN tunneling between firewalls, but I haven’t checked if it really passes VPN-protocol 47.