Networks

Ask something
Question Locked

VPN error 800

0 helpful
3 replies

by bogsibogs_102002

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi to all, I am having a problem in our VPN. We have 1 main branch which resides our VPN server with installed ISA firewall 2004 on it. We have a remote site also that connects to our main VPN branch. Using the ISP dynamic address came from the card that we bought from market the remote branch can access our VPN Server through this card and as well as the Dynamic IP address set by the ISP. But using the Static IP address that we apply from ISP, error 800 prompt me and a message same as VPN cannot be contact.

These is the setup:

Main Branch
1 Router/Modem with Static IP on it from ISP
ISA 2004 Firewall enabled
VPN and RAS server enabled

Remote Branch
1 Router/Modem with Fake IPs from ISP
**but if Dynamic Ip everything is ok
only Anti virus
VPN connection enabled

I try to put up another VPN server without Firewall on it everything is ok. but we need these ISA 2004 firewall in our VPN server. I already open a port 1723 on ISA server still problem occured. Hope you can help me with this matter.

3 replies

by cg it

VPN works with 2 protocols TCP/IP and GRE.

TCP/IP uses port 1723 while GRE uses port 47.

typically the firewall doesn't allow GRE traffic which causes the problem. Most consumer level routers often have a problem allowing GRE 47 passthrough.

If your using ISA, it's best to run the ISA VPN wizard to publish that service. Are you running Active Directory? if so, ISA intergrates with Active Directory and if a user isn't in the appropriate security group, ISA will deny the connection.

by bogsibogs_102002

thanks for the response. Yes I have Active directory located on different server and my ISA server on different server also but my ISA server is not connected to AD it is workgroup only is there a chance for me to run this setup without joining my ISA server to DOMAIN? can I use local users in my ISA server to access my VPN?

This discussion is closed to new replies.