VPN

Hello

I have used m0nowall in the past (since ver. 1.0) and I managed to do preety things with it. It is a nice tool. I successfully used features like PPTP VPN to connect both over WAN and LAN, manage traffic, NAT, etc

However I've tried now ver. 1.231 and cannot connect to the VPN server even though I have set up the VPN server address, set the address range, set the firewall rule, etc.

Anyway, when trying to connect from LAN interface, the server does not answer at all, does not even get to the "verifying username and password" stage. (Windows XP returns err 687 )


My current config:

m0n0 ver. 1.231  (AMD xp 2200+, 256 RAM)
2 interfaces, one for LAN 192.168.1.0/24 and one for WAN which is not connected
I've set to the firewall, in the PPTP int. section,  the rule PPTP->any
OS: Win XP Pro
VPN client: Windows PPTP client
Client machine firewall: disabled
Connection interface: LAN

Can someone tell me what am I missing and the server does not respond to PPTP connections?

PPTP requires two things. TCP port 1723 and GRE (a type of protocol). If either of these two are not making it to m0n0, then it won't work. That's all that I could possibly think is wrong with your config. To test port 1723 is easy. From a client machine, open a command prompt, and type telnet <ip of m0n0> 1723. If it hangs on
Connecting to <ip of firewall>...
then it's not working

If you see a blank black window for your command prompt, it means it connected and that port 1723 is working.


Good luck.

I have made a telnet connection on port 1723. It returns a black screen.
So this means port 1723 is accessible...

if GRE were the problem, you'd get a 619 error.

What is the machine you're forwarding to? Can you connect to it from inside the network?  It seems like this must be a problem with the internal server.

I cannot connect from the LAN network

Both the Client VPN and the mono server are in the same lan, connected through a Ethernet switch.
The server does not respond to VPN requests within LAN.
I have not tested from WAN

You need to test it from the Internet, not via public IP internally.

Ok, maby I did not make miself clear

Both the LAN interface of m0n0 and the client machine interface Im trying to connect from to VPN server are in the same LAN, connected via an Ethernet switch.

They both have private IPs

- m0n0 LAN int has 192.168.1.150  (and the VPN server has 192.168.1.200)
- the client LAN int has 192.168.1.11

Oh! If they're on the same network, m0n0wall has nothing to do with their communication. The only way m0n0wall would affect that is if the server was on one side of m0n0wall and the client on the other side.