VPN Error 718

[TC10284]

I have a SINGLE client that is unable to connect to our SBS 2003 VPN server.

We previously had AT&T DSL as the connection for the VPN server and primary network. Today we switched over to Earthlink Business T1. Nothing was changed on the firewall/router side. We use Untangle as our router/firewall.

Prior to the switchover, the client could connect to our VPN just fine (although slow due to the crappy DSL upload).

After the switchover, the client could not connect to our VPN. After changing the address to the new static IP under the VPN connection on Win XP Pro SP3, the client is still unable to connect. It always hangs at Verifying username and Password, then eventually times out with Error 718 - the connection was terminated because the remote computer did not respond in a timely manner.

Now, note that after the switchover to T1 I can connect to the VPN from my house instantly without any problems after making a new VPN connection on any of my random XP systems, even using the same username/password.

I went so far as to delete the VPN connection on the troubled client and that didn't help.
I tried playing with IPSec settings on the server and making the client use L2TP/IPSec and it wouldn't connect (I forget the error and I'm not sure I configure it right on the server).
I even disabled RRAS on the server and configured a new setup from scratch. No luck there either.

I have Googled and Googled to no end. Nothing has worked.

I configured OpenVPN and that connects fine, but when I attempt to browse to the shared folders via the UNC path (\\192.168.1.10\common), it wants the username/pass. Even though I put in the full/correct username (even with the domain) and right password, it always says that the username or password is incorrect. The only username/password it will take is the domain admin account on the server.

What can I do to fix the issue? Is there a better solution than a VPN connection for editing documents/Excel files? FTP? Terminal Server? I hate to configure Terminal server due to licensing and the possibility of it breaking a database that's on that server. I also hate for regular users to be logging into a database/domain controller.

Thanks for any assistance.

 

[aE0n]

This sounds a communication error. Might be the clients router is blocking PPTP passthrough (port 1723 and protocol GRE) or the clients IP range is the same as your office networks.
Also, check the event longs on the server for failed attempts.

 

[ViviTheMage]

FTP would be much easier if ALL you're doing is sharing files.

 

[Nothinman]

FTP would be much easier if ALL you're doing is sharing files.

Downloading, editing and reuploading is easier than just connecting a VPN client and editing in place?

 

[ViviTheMage]

Easier to set up

Never said it was easier to use .

 

[TC10284]

This sounds a communication error. Might be the clients router is blocking PPTP passthrough (port 1723 and protocol GRE) or the clients IP range is the same as your office networks.
Also, check the event longs on the server for failed attempts.

Well I gave it another try today since the system was not connected to the VPN since yesterday. I noticed that I could connect the first time instantly. But after I disconnected and reconnected it still got hung trying to verify username/pass, then gave error 718 again.

What I ended up doing was setting up OpenVPN on the Untangle router, then setting up an OVPN client on her PC and setting it as a service so that it would connect shortly after Windows booted. So far it is working well and she can still log into the domain (not cached credentials either because I disjoined the domain and rejoined it).

I hope this continues to work. I still very annoyed with how easily a PPTP VPN can be broken.

 

[airdata]

awesome to find a recent thread when I'm searching for answers.
I was on w\ a lady for work for about 20 minutes... luckily I finished dinner a minute or 2 before she called or I'd have been upset.

Apparently her son reset their router and blocked RDP traffic somehow.
I'll go ahead and file this one under user error.

OP : Do you know if your user added access rules on their home router to allow the vpn/rdp to the previous IP address you had?

 

[imagoon]

Well I gave it another try today since the system was not connected to the VPN since yesterday. I noticed that I could connect the first time instantly. But after I disconnected and reconnected it still got hung trying to verify username/pass, then gave error 718 again.

What I ended up doing was setting up OpenVPN on the Untangle router, then setting up an OVPN client on her PC and setting it as a service so that it would connect shortly after Windows booted. So far it is working well and she can still log into the domain (not cached credentials either because I disjoined the domain and rejoined it).

I hope this continues to work. I still very annoyed with how easily a PPTP VPN can be broken.

PPTP is the simplest. (well maybe now SSL). L2TP is exciting. Likely the router is using a VPN pass through mode of some sort and it isn't releasing the pass through for GRE. It doesn't break "easily" when the equipment doesn't mess with it.