Networks

Ask something
Discussion Locked

VPN connection prob. w/ Linksys BEFSR41

0 helpful
9 replies

by tom.greendyk 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I set up a server with Windows Small Business Srver 2003 and configured it for VPN access. I'm able to establish a VPN connection from another PC on the internal network, but when I try to connect from outside the network, it stops for a while on the "Verifying user name and password" screen and then I get an error as follows:

Error 628: Connection was terminated by the remote computer before it could be completed.

I have the router configured to pass ports 47 and 1723 as I was told I should. To me, this seemed like it was clearly a router issue. After spending a fair amount of time on the phone today with a Linksys tech, she determined that everything was set up propoerly on the router and that it must be a server setup issue.

I'd love to be proven wrong, but I'm not convinced. Got to ask, though. What on the server side might be causing this?

Thanks,

Tom Greendyk

9 replies

by cg it

Try it without the router. Thats one way to be sure it is or isn't a router issue.

Also give us some info on how RRAS is setup, specifically the VPN miniport configuration. Also how is your network security setup?

by tom.greendyk

D.R,

Thanks for the reply...to be honest, I'm exactly sure how to try it without the router. Since the router performs NAT, do I then need to reconfigure the server's NIC for the external IP address?

thanks,

Tom G

by ewgny

The issue is that the Linksys router, being a NAT router is modifying packets. IPsec recognizes the packets are modified and rejects them You'll need to use a router that can "pass through" IPsec or use PPTP instead of IPsec.
The link that answer 2 gave you refers to a linksys BEFVP41 which I believe has support for
IPsec.

by tom.greendyk

Thanks!

I check the router and it has a setting called 'Enable IPsec passthrough" that's checked. Is this all I need to do? There is also a setting for "Enable PPTP passthrough" that's checked as well.

Does this need to be one or the other?

Tom G

This discussion is closed to new replies.