D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DGL-4100 => Topic started by: Gandalf_Sr on September 04, 2009, 01:18:24 PM

Title: 4100 - Ports for MS VPN connection to work?
Post by: Gandalf_Sr on September 04, 2009, 01:18:24 PM
My 4100 is working really well - speed pass-through is outstanding!  The one thing I'm having issues with is getting a PPTP VPN connection to pass through the firewall.

I have VPN server set up on a Windows 2003 R2 X64 server on a separate NIC with the IP address 192.168.0.51.

I created 3 virtual server entries on the 4100 that pass:
- TCP for port 1723
- Protocol 47 for port 1723 (This may be a wrong assumption but I THINK that protocol 47 = GRE)
- UDP for Port 500 

Not sure if it's needed but I also added a game rule that opens ports 1723 and 500 for TCP and UDP respectively.

All attempts to establish the connection end up with the remote client timing out with a 721 'the remote computer did not respond' message and an entry in the 4100 log saying 'Blocked incoming GRE packet from xx.xx.xx.138 to xx.xx.xx.204' where the IP addresses are the remote client and local server IP addresses.

An extra piece of info is that I unchecked the IPSec (VPN) box under the firewall setting which was necessary to allow Cisco VPN clients behind the 4100 to connect to remote CISCO VPNs via the Internet.

Any ideas on what the issue is?