VPN Connection

[fraser]

I have a server with Windows Server 2008 installed and I'm trying to setup a VPN connection. When trying to connect to the server with a computer on the network the below error 812 appears. Outside the network it's the error 649. I've port forward the port 1723 to the server. Both tests are sucessful when using PPTP Ping. The router is a Netgear DG834GT with DGTeam firmware. I've also enabled the Routing and Remote Access Service although I'm not sure if I've set this up correctly.

VPN Error 812
The connection was prevented because of a policy configured on your RAS/VPN server. Specifically, the authentication method used by the server to verify your username and password may not match the authentication method configured in your connection profile. Please contact the Administrator of the RAS server and notify them of this error.

VPN Error 649
The account does not have permission to dial-in.

[chicagotech]

In most cases, VPN error 812 and 649 are permission issue. Do you have domain network or workgroup? Have you tried to use the VPN server local administartor to establish the VPN? You may check these two links:

VPN error 812
3 posts - 1 author - Last post: Jan 7, 2009
In many cases, VPN error 812 is permission issue or MS-CHAPv2 issue. Can you try another user like administrator? ...
http://chicagotech.net/netforums/viewtopic.php?f=2&t...0

Error 649 Cases
Error 645 Error 649 Error 650 Error 678 Error 682 Error 691 Error 711 Error 720 Error 721 VPN Error 732: The PPP negotiation is not converging Error 733 . ...
www.chicagotech.net/VPN/error649cases.htm

[fraser]

I can connect to the VPN now. Just selected the Allow Access in the Local Users and Groups on Windows Server. Still can't access the files and folders of the server. When I use the Map network drive the server's computer name is not there. I've also tried to disable the firewall.

[chicagotech]

Thank you for the update. The problem you have now is what we call name resolution. You may have two options to fix it.

1. Use the IP instead of the name to access the shared fodlers or files.
2. To fix teh name resolution for VPN, you may refer to these links:
#
Name resolution on VPN
Name resolution is big issue in VPN access. If your VPN server doesn't setup correctly or the VPN client can't receive the VPN DNS and WINS settings, ...
www.chicagotech.net/nameresolutionpnvpn.htm - Similar
#
VPN name resolution and browsing
Q: VPN name resolution and browsing. After I successfully connect to the VPN Server remotely, I cannot browse the network, and see other computers and ...
www.chicagotech.net/Q&A/vpn1.htm

Please post back with the result.

[fraser]

How do I setup the name resolution for the first time on a VPN server? I've tried to ping the computer name and this does not work i.e. ping server. Do I have to assign the computer name or shares with an IP address or something else?

[chicagotech]

Make sure you have correct DNS menaing teh DNS IP should be LAN DNS server. posting the result of ipconfig /all on both server and client here may help.

[fraser]

The DNS IP addresses are for the ISP.

http://www.frasersales.com/client.txt
http://www.frasersales.com/server.txt

[chicagotech]

That is the problem. You should use an internal DNS instead of the ISP DNS. Also using ISP DNS may cuase security and performence issues. More details can be found here:

Troubleshooting DNS
Resolution: Check the server DNS settings, especially make sure the server points to the internal DNS instead of the ISP DNS or 127.0.0.1. ...
www.chicagotech.net/dnstroubleshooting.htm

[fraser]

Do I change the DNS IP for the "PPP adapter Virtual Private Network Connection" or "Ethernet adapter Local Area Connection"? Is the internal DNS IP 127.0.0.1? The server does not have a DNS server installed.

[chicagotech]

Since you have windows 2008 server, it is better to create an internal DNS in windows 2008. Don't use 127.0.0.1 as DNS that will bring some issues to your network.

[fraser]

I setup the DNS Server and changed the DNS IP to the WAN IP address of the broadband. The internet & network is working so the DNS seems to be working correctly. On the remote computer the server computer icon and shares are stll not displaying on Windows Explorer. I'm connecting to VPN using the IP address. Remote desktop is working for the first time on the remote computer. Do I need to install WINS server to see the NetBIOS computer names on Windows Explorer? Do you have any other suggestions?

[blin]

1. You should point the DNS to the DNS IP address. PLease refer to this page:

Troubleshooting DNS
Common DNS settings mistakes. 1.The domain controller is not pointing to itself for DNS resolution on all network interfaces. Especially, when you have ...
www.chicagotech.net/dnstroubleshooting.htm

2. Yes, for VPN , it is better to setup WINS.