Can you try your laptop at his house?  That would verify his router and
internet connection.

If your laptop works, have him logon to your laptop and test the vpn.
That would verify his account. 

Only thing left is his computer.

On his computer, check the protocol binding order.  I've seen that a
couple times with Cisco vpn client.  You want tcp/ip for the vpn client
first.

Process of elimination always works best for me.

 

 

 

 

From: Aaron T. Rohyans [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2008 1:20 PM
To: NT System Admin Issues
Subject: RE: What could cause this VPN issue?

 

Could be a number of things really.... I'm assuming you're using
GRE/PPTP?

 

1.             His provider could be blocking GRE (IP Protocol #47).
This would allow the VPN to establish (via PPTP), but no traffic would
pass as GRE is being blocked.

2.             His router doesn't understand what GRE traffic is and is
not forwarding it (but again, the VPN gets established b/c PPTP rides
over TCP port 1723 - which all TCP/IP devices understand).

3.             In the case of IPSec VPNs, he could be using an IP
address for his physical NIC that overlaps with your corporate network.

4.             Your corporate network lacks a valid return route to get
back to VPN clients (probably not as you say it works for you just fine
- but just throwing it out there).

5.             He's using Vista and didn't sacrifice a chicken and
sprinkle Holy Water over it.

 

Hope this helps!

Aaron Rohyans 
IT Coordinator, IDC-USA 
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>  
317.244.8307 (V) 
317.244.4600 (F) 

________________________________

From: Evan Brastow [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2008 1:07 PM
To: NT System Admin Issues
Subject: What could cause this VPN issue?

 

Hi guys,

 

I have a weird problem and I'm not sure where to start troubleshooting
it.

 

I have a user that bought a new (Vista Ultimate) laptop. I am trying to
set up a VPN connection for them and have been going back and forth to
their house for the better part of the past week trying to get it
working.

 

Basically, this user connects the same way I do with my laptop at home.
Through a wireless router, out to the Internet, in through our
Netscreen, and gets authenticated via our RRAS server. All IP info is
assigned via DHCP.

 

For me, I connect via the VPN, and I can then resolve names on the
company network and attach to server drives. For him, even though he has
all the permissions needed, he can't even resolve his computer name to
connect via RAdmin. 

 

The connection to the VPN works fine and the status in Network
Connections on his laptop indicates that he is connected successfully to
the VPN, but I can't seem to get any DNS services, even though I have it
automatically configured to get all IP and general DNS info via DHCP.

 

It's just so strange... the exact same settings work for me, but not
him. Could his router be somehow blocking DNS info but allowing him to
connect to the VPN? Doesn't seem like it could. It seems like once he
establishes the tunnel, anything should be allowed within that tunnel.

 

Any thoughts on what to try?

 

Thanks,

 

Evan

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to