Could be a number of things really.... I'm assuming you're using GRE/PPTP?
1. His provider could be blocking GRE (IP Protocol #47). This would allow the VPN to establish (via PPTP), but no traffic would pass as GRE is being blocked. 2. His router doesn't understand what GRE traffic is and is not forwarding it (but again, the VPN gets established b/c PPTP rides over TCP port 1723 - which all TCP/IP devices understand). 3. In the case of IPSec VPNs, he could be using an IP address for his physical NIC that overlaps with your corporate network. 4. Your corporate network lacks a valid return route to get back to VPN clients (probably not as you say it works for you just fine - but just throwing it out there). 5. He's using Vista and didn't sacrifice a chicken and sprinkle Holy Water over it. Hope this helps! Aaron Rohyans IT Coordinator, IDC-USA [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> 317.244.8307 (V) 317.244.4600 (F) ________________________________ From: Evan Brastow [mailto:[EMAIL PROTECTED] Sent: Friday, November 14, 2008 1:07 PM To: NT System Admin Issues Subject: What could cause this VPN issue? Hi guys, I have a weird problem and I'm not sure where to start troubleshooting it. I have a user that bought a new (Vista Ultimate) laptop. I am trying to set up a VPN connection for them and have been going back and forth to their house for the better part of the past week trying to get it working. Basically, this user connects the same way I do with my laptop at home. Through a wireless router, out to the Internet, in through our Netscreen, and gets authenticated via our RRAS server. All IP info is assigned via DHCP. For me, I connect via the VPN, and I can then resolve names on the company network and attach to server drives. For him, even though he has all the permissions needed, he can't even resolve his computer name to connect via RAdmin. The connection to the VPN works fine and the status in Network Connections on his laptop indicates that he is connected successfully to the VPN, but I can't seem to get any DNS services, even though I have it automatically configured to get all IP and general DNS info via DHCP. It's just so strange... the exact same settings work for me, but not him. Could his router be somehow blocking DNS info but allowing him to connect to the VPN? Doesn't seem like it could. It seems like once he establishes the tunnel, anything should be allowed within that tunnel. Any thoughts on what to try? Thanks, Evan ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
