win 7 vpn error


  1. Posts : 42
    arch linux x64
       #1

    win 7 vpn error


    this is the first time i have tried to set up a vpn using only windows components.

    i have made an incoming connection on the win7x64 Ultimate machine which is located on over the WAN (ie.. not local), and i made the outgoing vpn connection on my machine which is also a win7x64 Ult. machine.

    i do have the same user login credentials on both machines.
    i do have ipv6 turned off on both machines

    on the outgoing machine
    i have selected mschap v2, optional encryption, pptp,
    unchecked automatically use windows login domain
    obtain ip auto

    on the incoming machine
    on the router firewall i have enables pptp port 1720, and also have tried DMZ
    windows firewall have tried allowing incoming on port 1720, and have tried firewall off

    mainly im getting an error 720
      My Computer


  2. Posts : 968
    Windows 7 Ultimate x64
       #2

    I have had this error with windows 7 from day one and I wish I could tell you how to get around it. I've tried everything as well just as you have stated still to no avail..I don't know but I would like a solution as well.
      My Computer


  3. 2xg
    Posts : 2,377
    Win7 & Win8 64bit
       #3

    Hello both....

    Try disabling IPV6 on both machines, see if it helps.
    i do have ipv6 turned off on both machines
      My Computer


  4. Posts : 42
    arch linux x64
    Thread Starter
       #4

    2xg, does that make sense, i already said i disabled the ipv6 on both, and you even quoted it, and im guessing after i made the topic seth saw that too. so what exactly did you mean by that? the error doesnt exactly have anything to do with ipv6 even so does it?

    i thought i posted back though, i got it to work ONCE after disabling both router firewall, AND win firewall on incoming machine. in fact i know i posted back. what happened to that post, maybe got lost in cyberspace.

    anyway, i will have to troubleshoot from here to see what firewall caused it. also, i had asked, WHAT PORTS do i need to enable for this PPTP, and VPN (ALL PORTS PLEASE), because 1720 alone isnt enough obviously.
      My Computer


  5. 2xg
    Posts : 2,377
    Win7 & Win8 64bit
       #5

    oops...I do tend to read things in reverse sometimes, sorry....

    Ports Needed for PPTP VPN
    - TCP Port 1723
    - UDP Port 500

    Ports Needed for L2TP VPN
    - TCP Port 1701
    - UDP Port 500

    Ports Needed for IPSec/ESP
    - UDP Port 500

    Also, try assigning Public DNS's.
      My Computer


  6. Posts : 42
    arch linux x64
    Thread Starter
       #6

    lol, maybe it was that port 500 then. ill try enabling that. thanks much!
      My Computer


  7. Posts : 42
    arch linux x64
    Thread Starter
       #7

    well, i have been connecting now and then. i went through the entire VPN architecture at m$ technet, and went through the PPTP, and L2TP tunnel methods as well.

    i have written down the settings i have used. Most of them have already been mentioned, so i think the main problem is the internet pipe isnt very stable for this type of connection because i get alot of intermittent results. it makes me think that those who are having hard times connecting, may stumble across the correct settings as i did, but still have the connection drop during that trial run due to bad connectivity and never know that your settings were actually correct. for example, when i am connected, the ping returns from the client to the host are random at best, and this is the case almost everytime im connected. also, sometimes it just wont connect, but if i keep trying to reconnect using the same settings and give the host comptuer time to fully wake up and the network to fully -re-establish itself after it has a brain fart, then it will finally connect.

    so dont forget to add a dash of persistence, and try connecting atlest 5 times on each settings that you do decide to try. It could take 5 to 10 minutes if your adjusting the networks hard, sometimes even the router needs to rebuild the routing table, and that takes a while too. dont hesitate to practice router restarts, as well as host and client pc restarts.

    i also wanted to mention the thing that i think was the deal breaker for me that was the main problem to not get any connect at all, and once i found that setting the connection went from defunct, to semi-reliable. this setting was in the ipv4 properties of the host. once i set that bottom setting that says 'allow callers to specify their own ip' that got me connected. then i had to go and fix back all the other settings to troubleshoot, like turning up the encryptions to maximum(still worked), and turning off EAP, and CHAP(still worked) and turning on to 'include windows logon domain or account into' (still worked) so as long as your settings are laxed you should get a connection, but check that ipv4 properties on the vpn server host to make sure you fully explore all the variables in there.



    PPTP VPN


    client VPN connection properties:
    ---------------------------------

    display progress while connection
    include windows logon domain
    redial attempts 5
    time between 10seconds
    idle time before hanging up - never
    redial if dropped
    PPP settings-enable LCP extensions, Enable software compressions
    PP2P tunneling protocol
    maximum encryption,
    ms-chap-v2
    ipv4,file and printer sharing, client for windows
    include windows logon domain
    and log on authentication


    server VPN connection properties:
    ---------------------------------
    protocl settings - ipv4 (make sure and try to allow users to specify ip), file printer sharing, client for windows
    set in your username for allowed users(i used administrator, and my username to be on the safe side)


    router properties:
    -----------------
    servers router - open ports 1723 tcp, 500 UDP, 4500 UDP

    clients router - if filtering outgoing connections, then probably mostly

    same as above - ports 1723 tcp, 500 UDP, 4500 UDP


    windows firewall properties:
    -----------------------------

    client - on - after enabling misc default rules, including PP2P-GRE headers

    server - on - after enabling misc default rules, including PP2P-GRE headers


    diagnose:
    ---------

    server software firewall - completely turn off the software firewall on the server machine, test connection.

    server router - set ip of server machine to DMZ in router, test connetion.

    host vpn settings - test various encryption options, such as 'Optional Encryption'
      My Computer


  8. 2xg
    Posts : 2,377
    Win7 & Win8 64bit
       #8

    You've tried this too?
    Also, try assigning Public DNS's.
      My Computer


  9. Posts : 42
    arch linux x64
    Thread Starter
       #9

    hmm, i think i did.

    i like to use 8.8.8.8 and 8.8.4.4, but i think for sure i have those set in more than one place, such as at the initial phone usb adapter, and as long as i can route to that device then the device can also pick up the dns's which it will be needed on the next hop.

    I did try it in the Networking settings of the outgoing VPN connection i set DNS to public DNS.

    also, i did edit those settings in the router when i was messing with it for other reasons. i set them into the dns location of the WAN (8.8.8.8, etc..).

    i hope thats what your talkiing about.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:33.
Find Us