Please Help! Newbie VPN Problem...

  • Thread starter Thread starter Mustafa
  • Start date Start date
M

Mustafa

Hello Everyone,

We have a static IP address at our office, this line comes into a
Netgear MR814v2 router which has been configured so that it forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server is set up
as our VPN server. It only has one Ethernet card in it which is
connected to our router. Via the RRAS panel, I've created the policy to
allow VPN connections and when I try to connect to the VPN via another
computer running Windows XP sp2 either by using the server's local ip
(192.168.1.184) or our static external IP, I get the same error, #733.
Oh, also, our Server is not a domain server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my background; we
are a small company and just want to get a VPN server set up so we can
access our local resources when travelling.

Thanks in advance for any and all help.
 
I've gone to the DHCP relay Agent in the "Routing and Remote Access"
Panel under "IP Routing" and told it to send messages to the 192.168.1.1
address, which is where our router is. Is this incorrect?

Thanks again for any and all help.
 
Hey All!

Thanks for the help. I think I found the error, my router is set up to
assign IP addressed from a pool and the RAS server wasn't expecting
that. I made the change to assign addresses from the same pool and now I
can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I should refer
to the computer?

Thanks again!
Mustafa
 
ras error 733 is tcp/ip protocol or dhcp issue. do you have DHCP? quoted from http://www.howtonetworking.com/raserrors.htm
Error 733: the PPP control protocol for this network protocol is not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS server and that the TCP/IP protocol is selected in the Server Settings of the Network Configuration option of the Remote Access Setup dialog.
2) If you have the "Use DHCP to assign remote TCP/IP client addresses" option selected for the TCP/IP protocol in the RAS Server Settings, then ensure that you have installed DHCP and that it is not disabled.
3) Ensure that all of the bindings for TCP/IP are enabled in the Bindings tab of the Network dialog of the Control Panel. Be sure to inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings for all adapters, all protocols, and all services. If the TCP/IP bindings are corrupt, you may have to reinstall TCP/IP and or RAS in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.


Hello Everyone,

We have a static IP address at our office, this line comes into a
Netgear MR814v2 router which has been configured so that it forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server is set up
as our VPN server. It only has one Ethernet card in it which is
connected to our router. Via the RRAS panel, I've created the policy to
allow VPN connections and when I try to connect to the VPN via another
computer running Windows XP sp2 either by using the server's local ip
(192.168.1.184) or our static external IP, I get the same error, #733.
Oh, also, our Server is not a domain server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my background; we
are a small company and just want to get a VPN server set up so we can
access our local resources when travelling.

Thanks in advance for any and all help.
 
A VPN link doesn't carry broadcasts, so you cannot resolve names by
broadcast. If you are not using DNS or WINS, you will need HOSTS or LMHOSTS
files on the client to resolve names to IP addresses.
 
thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to the VPN.
any ideas?

2. when i'm on my laptop at my apartment (where we also have a router),
my local IP is something like 192.168.1.105 or whatever. if I'm trying
to access a computer on the network that I'm connecting to via the VPN
(say my office pc), and its IP address at the office is 192.168.1.105,
isn't there a conflict at this point? even if the IP's differ, when I
type //192.168.1.105 or whatever how does the network know which
"192.168.1.***" network I'm referring to?

3. Can anyone please point me to information regarding WINS/DNS and how
to set it up so I can access my office resources via VPN by name? As I
mentioned, I have zero experience regarding this subject; I'm just
trying to set it up so we can share resources when on the road.

Thanks again, much appreciated.
Mustafa
 
1. i also lose my local internet connection when connected to the VPN. any
you can use split tunnelling for this. In your VPN connectoid properties ->
Networking tab --> Click on TCP/IP --> click on Properties --> Advanced.
Uncheck 'Use default gateway on remote network' and then connect.

Thanks,
Janani
---------------------------------------------------------------------------
"This posting is provided "AS IS" with no warranties, and confers no
rights."


Mustafa said:
thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to the VPN. any
ideas?

2. when i'm on my laptop at my apartment (where we also have a router), my
local IP is something like 192.168.1.105 or whatever. if I'm trying to
access a computer on the network that I'm connecting to via the VPN (say
my office pc), and its IP address at the office is 192.168.1.105, isn't
there a conflict at this point? even if the IP's differ, when I type
//192.168.1.105 or whatever how does the network know which
"192.168.1.***" network I'm referring to?

3. Can anyone please point me to information regarding WINS/DNS and how to
set it up so I can access my office resources via VPN by name? As I
mentioned, I have zero experience regarding this subject; I'm just trying
to set it up so we can share resources when on the road.

Thanks again, much appreciated.
Mustafa

Bill said:
A VPN link doesn't carry broadcasts, so you cannot resolve names by
broadcast. If you are not using DNS or WINS, you will need HOSTS or
LMHOSTS files on the client to resolve names to IP addresses.
Hey All!

Thanks for the help. I think I found the error, my router is set up to
assign IP addressed from a pool and the RAS server wasn't expecting
that. I made the change to assign addresses from the same pool and
now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I should
refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:

ras error 733 is tcp/ip protocol or dhcp issue. do you have DHCP?
quoted from http://www.howtonetworking.com/raserrors.htm

*Error 733*: the PPP control protocol for this network protocol is
not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS server
and that the TCP/IP protocol is selected in the Server Settings of
the Network Configuration option of the Remote Access Setup dialog.
2) If you have the "Use DHCP to assign remote TCP/IP client
addresses" option selected for the TCP/IP protocol in the RAS Server
Settings, then ensure that you have installed DHCP and that it is
not disabled. 3) Ensure that all of the bindings for TCP/IP are
enabled in the Bindings tab of the Network dialog of the Control Panel.
Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings for all
adapters, all protocols, and all services. If the TCP/IP bindings are
corrupt, you may have to reinstall TCP/IP and or RAS in order to
clean up the bindings.

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get
more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes into a
Netgear MR814v2 router which has been configured so that it
forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server is
set up
as our VPN server. It only has one Ethernet card in it which is
connected to our router. Via the RRAS panel, I've created the
policy to allow VPN connections and when I try to connect to the
VPN via another computer running Windows XP sp2 either by using
the server's local ip (192.168.1.184) or our static external IP,
I get the same error, #733. Oh, also, our Server is not a domain
server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
You should be able to access your office machines by their DNS names.
Does the client receive the correct DNS address when it connects?

As well as the correct DNS server address, you need to use the correct
DNS suffix. If your office domain name is company.com , then you need to put
this in the connection properties of the VPN client. If you don't, you will
need to use the FQDN of the machines (eg machine.company.com) to resolve
thier names to IP addresses.
thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to the VPN.
any ideas?

2. when i'm on my laptop at my apartment (where we also have a
router), my local IP is something like 192.168.1.105 or whatever. if
I'm trying to access a computer on the network that I'm connecting to
via the VPN (say my office pc), and its IP address at the office is
192.168.1.105, isn't there a conflict at this point? even if the IP's
differ, when I type //192.168.1.105 or whatever how does the network
know which "192.168.1.***" network I'm referring to?

3. Can anyone please point me to information regarding WINS/DNS and
how to set it up so I can access my office resources via VPN by name?
As I mentioned, I have zero experience regarding this subject; I'm
just trying to set it up so we can share resources when on the road.

Thanks again, much appreciated.
Mustafa

Bill said:
A VPN link doesn't carry broadcasts, so you cannot resolve names
by broadcast. If you are not using DNS or WINS, you will need HOSTS
or LMHOSTS files on the client to resolve names to IP addresses.
Hey All!

Thanks for the help. I think I found the error, my router is set up
to assign IP addressed from a pool and the RAS server wasn't
expecting that. I made the change to assign addresses from the same
pool and now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I should
refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:

ras error 733 is tcp/ip protocol or dhcp issue. do you have DHCP?
quoted from http://www.howtonetworking.com/raserrors.htm

*Error 733*: the PPP control protocol for this network protocol is
not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS server
and that the TCP/IP protocol is selected in the Server Settings of
the Network Configuration option of the Remote Access Setup dialog.
2) If you have the "Use DHCP to assign remote TCP/IP client
addresses" option selected for the TCP/IP protocol in the RAS
Server Settings, then ensure that you have installed DHCP and that
it is not disabled. 3) Ensure that all of the bindings for TCP/IP are
enabled in the Bindings tab of the Network dialog of the Control
Panel. Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings for
all adapters, all protocols, and all services. If the TCP/IP
bindings are corrupt, you may have to reinstall TCP/IP and or RAS
in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting
services. Posting on MS newsgroup will benefit all readers and you
may get more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes into
a Netgear MR814v2 router which has been configured so that it
forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server
is set up
as our VPN server. It only has one Ethernet card in it which is
connected to our router. Via the RRAS panel, I've created the
policy to allow VPN connections and when I try to connect to the
VPN via another computer running Windows XP sp2 either by using
the server's local ip (192.168.1.184) or our static external IP,
I get the same error, #733. Oh, also, our Server is not a domain
server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
Thanks again for the responses, but I don't understand how to confirm
whether the client receieves the correct DNS address when it connects
and/or how to set the correct DNS suffix. Where do I check the office
domain name?

Thanks.
Mustafa

Bill said:
You should be able to access your office machines by their DNS names.
Does the client receive the correct DNS address when it connects?

As well as the correct DNS server address, you need to use the correct
DNS suffix. If your office domain name is company.com , then you need to put
this in the connection properties of the VPN client. If you don't, you will
need to use the FQDN of the machines (eg machine.company.com) to resolve
thier names to IP addresses.
thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to the VPN.
any ideas?

2. when i'm on my laptop at my apartment (where we also have a
router), my local IP is something like 192.168.1.105 or whatever. if
I'm trying to access a computer on the network that I'm connecting to
via the VPN (say my office pc), and its IP address at the office is
192.168.1.105, isn't there a conflict at this point? even if the IP's
differ, when I type //192.168.1.105 or whatever how does the network
know which "192.168.1.***" network I'm referring to?

3. Can anyone please point me to information regarding WINS/DNS and
how to set it up so I can access my office resources via VPN by name?
As I mentioned, I have zero experience regarding this subject; I'm
just trying to set it up so we can share resources when on the road.

Thanks again, much appreciated.
Mustafa

Bill said:
A VPN link doesn't carry broadcasts, so you cannot resolve names
by broadcast. If you are not using DNS or WINS, you will need HOSTS
or LMHOSTS files on the client to resolve names to IP addresses.

Mustafa wrote:


Hey All!

Thanks for the help. I think I found the error, my router is set up
to assign IP addressed from a pool and the RAS server wasn't
expecting that. I made the change to assign addresses from the same
pool and now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I should
refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:


ras error 733 is tcp/ip protocol or dhcp issue. do you have DHCP?
quoted from http://www.howtonetworking.com/raserrors.htm

*Error 733*: the PPP control protocol for this network protocol is
not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS server
and that the TCP/IP protocol is selected in the Server Settings of
the Network Configuration option of the Remote Access Setup dialog.
2) If you have the "Use DHCP to assign remote TCP/IP client
addresses" option selected for the TCP/IP protocol in the RAS
Server Settings, then ensure that you have installed DHCP and that
it is not disabled. 3) Ensure that all of the bindings for TCP/IP are
enabled in the Bindings tab of the Network dialog of the Control
Panel. Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings for
all adapters, all protocols, and all services. If the TCP/IP
bindings are corrupt, you may have to reinstall TCP/IP and or RAS
in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting
services. Posting on MS newsgroup will benefit all readers and you
may get more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes into
a Netgear MR814v2 router which has been configured so that it
forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server
is set up
as our VPN server. It only has one Ethernet card in it which is
connected to our router. Via the RRAS panel, I've created the
policy to allow VPN connections and when I try to connect to the
VPN via another computer running Windows XP sp2 either by using
the server's local ip (192.168.1.184) or our static external IP,
I get the same error, #733. Oh, also, our Server is not a domain
server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
To confirm what the DNS address is, do an ipconfig /all on the client
while connected to VPN. It should show the address of the DNS server at your
office for the VPN connection.

You set the DNS suffix in the Advanced TCP/IP properties of the VPN
connection.
Thanks again for the responses, but I don't understand how to confirm
whether the client receieves the correct DNS address when it connects
and/or how to set the correct DNS suffix. Where do I check the office
domain name?

Thanks.
Mustafa

Bill said:
You should be able to access your office machines by their DNS
names. Does the client receive the correct DNS address when it
connects? As well as the correct DNS server address, you need to use the
correct DNS suffix. If your office domain name is company.com , then
you need to put this in the connection properties of the VPN client.
If you don't, you will need to use the FQDN of the machines (eg
machine.company.com) to resolve thier names to IP addresses.
thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to the
VPN. any ideas?

2. when i'm on my laptop at my apartment (where we also have a
router), my local IP is something like 192.168.1.105 or whatever. if
I'm trying to access a computer on the network that I'm connecting
to via the VPN (say my office pc), and its IP address at the office
is 192.168.1.105, isn't there a conflict at this point? even if the
IP's differ, when I type //192.168.1.105 or whatever how does the
network know which "192.168.1.***" network I'm referring to?

3. Can anyone please point me to information regarding WINS/DNS and
how to set it up so I can access my office resources via VPN by
name? As I mentioned, I have zero experience regarding this
subject; I'm just trying to set it up so we can share resources
when on the road. Thanks again, much appreciated.
Mustafa

Bill Grant wrote:

A VPN link doesn't carry broadcasts, so you cannot resolve names
by broadcast. If you are not using DNS or WINS, you will need HOSTS
or LMHOSTS files on the client to resolve names to IP addresses.

Mustafa wrote:


Hey All!

Thanks for the help. I think I found the error, my router is set
up to assign IP addressed from a pool and the RAS server wasn't
expecting that. I made the change to assign addresses from the
same pool and now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I should
refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:


ras error 733 is tcp/ip protocol or dhcp issue. do you have DHCP?
quoted from http://www.howtonetworking.com/raserrors.htm

*Error 733*: the PPP control protocol for this network protocol
is not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS
server and that the TCP/IP protocol is selected in the Server
Settings of the Network Configuration option of the Remote
Access Setup dialog. 2) If you have the "Use DHCP to assign
remote TCP/IP client addresses" option selected for the TCP/IP
protocol in the RAS Server Settings, then ensure that you have
installed DHCP and
that it is not disabled. 3) Ensure that all of the bindings for
TCP/IP are enabled in the Bindings tab of the Network dialog of
the Control Panel. Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings for
all adapters, all protocols, and all services. If the TCP/IP
bindings are corrupt, you may have to reinstall TCP/IP and or RAS
in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting
services. Posting on MS newsgroup will benefit all readers and
you may get more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes into
a Netgear MR814v2 router which has been configured so that it
forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server
is set up
as our VPN server. It only has one Ethernet card in it which is
connected to our router. Via the RRAS panel, I've created the
policy to allow VPN connections and when I try to connect to
the VPN via another computer running Windows XP sp2 either by
using the server's local ip (192.168.1.184) or our static
external IP, I get the same error, #733. Oh, also, our Server
is not a domain server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
The information for my VPN connection is (slightly altered) as follows:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.151
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : These are correct. :)

Is the "Subnet Mask" okay? My normal internet connection is
255.255.255.0. What about default gateway?

Thanks again everyone.



Bill said:
To confirm what the DNS address is, do an ipconfig /all on the client
while connected to VPN. It should show the address of the DNS server at your
office for the VPN connection.

You set the DNS suffix in the Advanced TCP/IP properties of the VPN
connection.
Thanks again for the responses, but I don't understand how to confirm
whether the client receieves the correct DNS address when it connects
and/or how to set the correct DNS suffix. Where do I check the office
domain name?

Thanks.
Mustafa

Bill said:
You should be able to access your office machines by their DNS
names. Does the client receive the correct DNS address when it
connects? As well as the correct DNS server address, you need to use the
correct DNS suffix. If your office domain name is company.com , then
you need to put this in the connection properties of the VPN client.
If you don't, you will need to use the FQDN of the machines (eg
machine.company.com) to resolve thier names to IP addresses.

Mustafa wrote:


thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to the
VPN. any ideas?

2. when i'm on my laptop at my apartment (where we also have a
router), my local IP is something like 192.168.1.105 or whatever. if
I'm trying to access a computer on the network that I'm connecting
to via the VPN (say my office pc), and its IP address at the office
is 192.168.1.105, isn't there a conflict at this point? even if the
IP's differ, when I type //192.168.1.105 or whatever how does the
network know which "192.168.1.***" network I'm referring to?

3. Can anyone please point me to information regarding WINS/DNS and
how to set it up so I can access my office resources via VPN by
name? As I mentioned, I have zero experience regarding this
subject; I'm just trying to set it up so we can share resources
when on the road. Thanks again, much appreciated.
Mustafa

Bill Grant wrote:


A VPN link doesn't carry broadcasts, so you cannot resolve names
by broadcast. If you are not using DNS or WINS, you will need HOSTS
or LMHOSTS files on the client to resolve names to IP addresses.

Mustafa wrote:



Hey All!

Thanks for the help. I think I found the error, my router is set
up to assign IP addressed from a pool and the RAS server wasn't
expecting that. I made the change to assign addresses from the
same pool and now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I should
refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:



ras error 733 is tcp/ip protocol or dhcp issue. do you have DHCP?
quoted from http://www.howtonetworking.com/raserrors.htm

*Error 733*: the PPP control protocol for this network protocol
is not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS
server and that the TCP/IP protocol is selected in the Server
Settings of the Network Configuration option of the Remote
Access Setup dialog. 2) If you have the "Use DHCP to assign
remote TCP/IP client addresses" option selected for the TCP/IP
protocol in the RAS Server Settings, then ensure that you have
installed DHCP and
that it is not disabled. 3) Ensure that all of the bindings for
TCP/IP are enabled in the Bindings tab of the Network dialog of
the Control Panel. Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings for
all adapters, all protocols, and all services. If the TCP/IP
bindings are corrupt, you may have to reinstall TCP/IP and or RAS
in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting
services. Posting on MS newsgroup will benefit all readers and
you may get more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes into
a Netgear MR814v2 router which has been configured so that it
forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server
is set up
as our VPN server. It only has one Ethernet card in it which is
connected to our router. Via the RRAS panel, I've created the
policy to allow VPN connections and when I try to connect to
the VPN via another computer running Windows XP sp2 either by
using the server's local ip (192.168.1.184) or our static
external IP, I get the same error, #733. Oh, also, our Server
is not a domain server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
Don't worry about the subnet mask. That really only indicates that you
are using a point to point connection. All traffic for 192.168.1.x addresses
will go over the VPN connection to the VPN server. That server will act as a
proxy for the remote, and transfer the data to the LAN. As far as TCP/IP is
concerned, your remote machine is just another local machine. The server
proxy operation is transparent to the LAN machines.

As far as DNS goes, if you have the correct IP addresses for your LAN
DNS server, you should be able to ping LAN machines by their full name (eg
machinename.domain.local). If you can do this but want to be able to use
just machinename , put the domain name (domain.local in this example) into
the connection-specific DNS suffix on the client machine.
The information for my VPN connection is (slightly altered) as
follows:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.151
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : These are correct. :)

Is the "Subnet Mask" okay? My normal internet connection is
255.255.255.0. What about default gateway?

Thanks again everyone.



Bill said:
To confirm what the DNS address is, do an ipconfig /all on the
client while connected to VPN. It should show the address of the DNS
server at your office for the VPN connection.

You set the DNS suffix in the Advanced TCP/IP properties of the
VPN connection.
Thanks again for the responses, but I don't understand how to
confirm whether the client receieves the correct DNS address when
it connects and/or how to set the correct DNS suffix. Where do I
check the office domain name?

Thanks.
Mustafa

Bill Grant wrote:

You should be able to access your office machines by their DNS
names. Does the client receive the correct DNS address when it
connects? As well as the correct DNS server address, you need to
use the correct DNS suffix. If your office domain name is
company.com , then you need to put this in the connection
properties of the VPN client. If you don't, you will need to use the
FQDN of the machines (eg
machine.company.com) to resolve thier names to IP addresses.

Mustafa wrote:


thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to the
VPN. any ideas?

2. when i'm on my laptop at my apartment (where we also have a
router), my local IP is something like 192.168.1.105 or whatever.
if I'm trying to access a computer on the network that I'm
connecting to via the VPN (say my office pc), and its IP address
at the office is 192.168.1.105, isn't there a conflict at this
point? even if the IP's differ, when I type //192.168.1.105 or
whatever how does the network know which "192.168.1.***" network
I'm referring to? 3. Can anyone please point me to information
regarding WINS/DNS
and how to set it up so I can access my office resources via VPN
by name? As I mentioned, I have zero experience regarding this
subject; I'm just trying to set it up so we can share resources
when on the road. Thanks again, much appreciated.
Mustafa

Bill Grant wrote:


A VPN link doesn't carry broadcasts, so you cannot resolve
names by broadcast. If you are not using DNS or WINS, you will
need HOSTS or LMHOSTS files on the client to resolve names to IP
addresses. Mustafa wrote:



Hey All!

Thanks for the help. I think I found the error, my router is set
up to assign IP addressed from a pool and the RAS server wasn't
expecting that. I made the change to assign addresses from the
same pool and now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I
should refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:



ras error 733 is tcp/ip protocol or dhcp issue. do you have
DHCP? quoted from http://www.howtonetworking.com/raserrors.htm

*Error 733*: the PPP control protocol for this network protocol
is not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS
server and that the TCP/IP protocol is selected in the Server
Settings of the Network Configuration option of the Remote
Access Setup dialog. 2) If you have the "Use DHCP to assign
remote TCP/IP client addresses" option selected for the TCP/IP
protocol in the RAS Server Settings, then ensure that you have
installed DHCP and
that it is not disabled. 3) Ensure that all of the bindings for
TCP/IP are enabled in the Bindings tab of the Network dialog of
the Control Panel. Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings
for all adapters, all protocols, and all services. If the
TCP/IP bindings are corrupt, you may have to reinstall TCP/IP
and or RAS in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting
services. Posting on MS newsgroup will benefit all readers and
you may get more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes
into a Netgear MR814v2 router which has been configured so
that it forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server
is set up
as our VPN server. It only has one Ethernet card in it which
is connected to our router. Via the RRAS panel, I've created
the policy to allow VPN connections and when I try to connect
to the VPN via another computer running Windows XP sp2 either
by using the server's local ip (192.168.1.184) or our static
external IP, I get the same error, #733. Oh, also, our Server
is not a domain server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
Thanks again for all the help, it's making sense now. The only question
I have is that I don't know the domain name for our connection. How do I
determine that so I can access the machine's on the VPN?

Thanks again, I really appreciate it.

Mustafa

Bill said:
Don't worry about the subnet mask. That really only indicates that you
are using a point to point connection. All traffic for 192.168.1.x addresses
will go over the VPN connection to the VPN server. That server will act as a
proxy for the remote, and transfer the data to the LAN. As far as TCP/IP is
concerned, your remote machine is just another local machine. The server
proxy operation is transparent to the LAN machines.

As far as DNS goes, if you have the correct IP addresses for your LAN
DNS server, you should be able to ping LAN machines by their full name (eg
machinename.domain.local). If you can do this but want to be able to use
just machinename , put the domain name (domain.local in this example) into
the connection-specific DNS suffix on the client machine.
The information for my VPN connection is (slightly altered) as
follows:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.151
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : These are correct. :)

Is the "Subnet Mask" okay? My normal internet connection is
255.255.255.0. What about default gateway?

Thanks again everyone.



Bill said:
To confirm what the DNS address is, do an ipconfig /all on the
client while connected to VPN. It should show the address of the DNS
server at your office for the VPN connection.

You set the DNS suffix in the Advanced TCP/IP properties of the
VPN connection.

Mustafa wrote:


Thanks again for the responses, but I don't understand how to
confirm whether the client receieves the correct DNS address when
it connects and/or how to set the correct DNS suffix. Where do I
check the office domain name?

Thanks.
Mustafa

Bill Grant wrote:


You should be able to access your office machines by their DNS
names. Does the client receive the correct DNS address when it
connects? As well as the correct DNS server address, you need to
use the correct DNS suffix. If your office domain name is
company.com , then you need to put this in the connection
properties of the VPN client. If you don't, you will need to use the
FQDN of the machines (eg
machine.company.com) to resolve thier names to IP addresses.

Mustafa wrote:



thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to the
VPN. any ideas?

2. when i'm on my laptop at my apartment (where we also have a
router), my local IP is something like 192.168.1.105 or whatever.
if I'm trying to access a computer on the network that I'm
connecting to via the VPN (say my office pc), and its IP address
at the office is 192.168.1.105, isn't there a conflict at this
point? even if the IP's differ, when I type //192.168.1.105 or
whatever how does the network know which "192.168.1.***" network
I'm referring to? 3. Can anyone please point me to information
regarding WINS/DNS
and how to set it up so I can access my office resources via VPN
by name? As I mentioned, I have zero experience regarding this
subject; I'm just trying to set it up so we can share resources
when on the road. Thanks again, much appreciated.
Mustafa

Bill Grant wrote:



A VPN link doesn't carry broadcasts, so you cannot resolve
names by broadcast. If you are not using DNS or WINS, you will
need HOSTS or LMHOSTS files on the client to resolve names to IP
addresses. Mustafa wrote:




Hey All!

Thanks for the help. I think I found the error, my router is set
up to assign IP addressed from a pool and the RAS server wasn't
expecting that. I made the change to assign addresses from the
same pool and now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I
should refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:




ras error 733 is tcp/ip protocol or dhcp issue. do you have
DHCP? quoted from http://www.howtonetworking.com/raserrors.htm

*Error 733*: the PPP control protocol for this network protocol
is not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS
server and that the TCP/IP protocol is selected in the Server
Settings of the Network Configuration option of the Remote
Access Setup dialog. 2) If you have the "Use DHCP to assign
remote TCP/IP client addresses" option selected for the TCP/IP
protocol in the RAS Server Settings, then ensure that you have
installed DHCP and
that it is not disabled. 3) Ensure that all of the bindings for
TCP/IP are enabled in the Bindings tab of the Network dialog of
the Control Panel. Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings
for all adapters, all protocols, and all services. If the
TCP/IP bindings are corrupt, you may have to reinstall TCP/IP
and or RAS in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting
services. Posting on MS newsgroup will benefit all readers and
you may get more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes
into a Netgear MR814v2 router which has been configured so
that it forwards the
ports 1723 and 499-501 to our Windows 2003 server. This server
is set up
as our VPN server. It only has one Ethernet card in it which
is connected to our router. Via the RRAS panel, I've created
the policy to allow VPN connections and when I try to connect
to the VPN via another computer running Windows XP sp2 either
by using the server's local ip (192.168.1.184) or our static
external IP, I get the same error, #733. Oh, also, our Server
is not a domain server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
You can get all that info from your DNS server. Or simply do an ipconfig
/all when you are in the office and logged into the domain.
Thanks again for all the help, it's making sense now. The only
question I have is that I don't know the domain name for our
connection. How do I determine that so I can access the machine's on
the VPN?
Thanks again, I really appreciate it.

Mustafa

Bill said:
Don't worry about the subnet mask. That really only indicates
that you are using a point to point connection. All traffic for
192.168.1.x addresses will go over the VPN connection to the VPN
server. That server will act as a proxy for the remote, and transfer
the data to the LAN. As far as TCP/IP is concerned, your remote
machine is just another local machine. The server proxy operation is
transparent to the LAN machines. As far as DNS goes, if you have the
correct IP addresses for
your LAN DNS server, you should be able to ping LAN machines by
their full name (eg machinename.domain.local). If you can do this
but want to be able to use just machinename , put the domain name
(domain.local in this example) into the connection-specific DNS
suffix said:
The information for my VPN connection is (slightly altered) as
follows:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.151
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : These are correct. :)

Is the "Subnet Mask" okay? My normal internet connection is
255.255.255.0. What about default gateway?

Thanks again everyone.



Bill Grant wrote:

To confirm what the DNS address is, do an ipconfig /all on the
client while connected to VPN. It should show the address of the
DNS server at your office for the VPN connection.

You set the DNS suffix in the Advanced TCP/IP properties of the
VPN connection.

Mustafa wrote:


Thanks again for the responses, but I don't understand how to
confirm whether the client receieves the correct DNS address when
it connects and/or how to set the correct DNS suffix. Where do I
check the office domain name?

Thanks.
Mustafa

Bill Grant wrote:


You should be able to access your office machines by their DNS
names. Does the client receive the correct DNS address when it
connects? As well as the correct DNS server address, you need to
use the correct DNS suffix. If your office domain name is
company.com , then you need to put this in the connection
properties of the VPN client. If you don't, you will need to use
the FQDN of the machines (eg
machine.company.com) to resolve thier names to IP addresses.

Mustafa wrote:



thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to
the VPN. any ideas?

2. when i'm on my laptop at my apartment (where we also have a
router), my local IP is something like 192.168.1.105 or
whatever. if I'm trying to access a computer on the network
that I'm connecting to via the VPN (say my office pc), and its
IP address at the office is 192.168.1.105, isn't there a
conflict at this point? even if the IP's differ, when I type
//192.168.1.105 or whatever how does the network know which
"192.168.1.***" network I'm referring to? 3. Can anyone please
point me to information regarding WINS/DNS
and how to set it up so I can access my office resources via VPN
by name? As I mentioned, I have zero experience regarding this
subject; I'm just trying to set it up so we can share resources
when on the road. Thanks again, much appreciated.
Mustafa

Bill Grant wrote:



A VPN link doesn't carry broadcasts, so you cannot resolve
names by broadcast. If you are not using DNS or WINS, you will
need HOSTS or LMHOSTS files on the client to resolve names to
IP addresses. Mustafa wrote:




Hey All!

Thanks for the help. I think I found the error, my router is
set up to assign IP addressed from a pool and the RAS server
wasn't expecting that. I made the change to assign addresses
from the same pool and now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I
should refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:




ras error 733 is tcp/ip protocol or dhcp issue. do you have
DHCP? quoted from
http://www.howtonetworking.com/raserrors.htm *Error 733*: the PPP
control protocol for this network
protocol is not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS
server and that the TCP/IP protocol is selected in the Server
Settings of the Network Configuration option of the Remote
Access Setup dialog. 2) If you have the "Use DHCP to assign
remote TCP/IP client addresses" option selected for the
TCP/IP protocol in the RAS Server Settings, then ensure that
you have installed DHCP and
that it is not disabled. 3) Ensure that all of the bindings
for TCP/IP are enabled in the Bindings tab of the Network
dialog of the Control Panel. Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings
for all adapters, all protocols, and all services. If the
TCP/IP bindings are corrupt, you may have to reinstall TCP/IP
and or RAS in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting
services. Posting on MS newsgroup will benefit all readers
and you may get more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes
into a Netgear MR814v2 router which has been configured so
that it forwards the
ports 1723 and 499-501 to our Windows 2003 server. This
server is set up
as our VPN server. It only has one Ethernet card in it which
is connected to our router. Via the RRAS panel, I've created
the policy to allow VPN connections and when I try to connect
to the VPN via another computer running Windows XP sp2 either
by using the server's local ip (192.168.1.184) or our static
external IP, I get the same error, #733. Oh, also, our Server
is not a domain server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
beautiful! thanks so much for all your help. I was totally lost before
this thread.

Mustafa

Bill said:
You can get all that info from your DNS server. Or simply do an ipconfig
/all when you are in the office and logged into the domain.
Thanks again for all the help, it's making sense now. The only
question I have is that I don't know the domain name for our
connection. How do I determine that so I can access the machine's on
the VPN?
Thanks again, I really appreciate it.

Mustafa

Bill said:
Don't worry about the subnet mask. That really only indicates
that you are using a point to point connection. All traffic for
192.168.1.x addresses will go over the VPN connection to the VPN
server. That server will act as a proxy for the remote, and transfer
the data to the LAN. As far as TCP/IP is concerned, your remote
machine is just another local machine. The server proxy operation is
transparent to the LAN machines. As far as DNS goes, if you have the
correct IP addresses for
your LAN DNS server, you should be able to ping LAN machines by
their full name (eg machinename.domain.local). If you can do this
but want to be able to use just machinename , put the domain name
(domain.local in this example) into the connection-specific DNS
suffix on the client machine. Mustafa wrote:


The information for my VPN connection is (slightly altered) as
follows:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.151
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : These are correct. :)

Is the "Subnet Mask" okay? My normal internet connection is
255.255.255.0. What about default gateway?

Thanks again everyone.



Bill Grant wrote:


To confirm what the DNS address is, do an ipconfig /all on the
client while connected to VPN. It should show the address of the
DNS server at your office for the VPN connection.

You set the DNS suffix in the Advanced TCP/IP properties of the
VPN connection.

Mustafa wrote:



Thanks again for the responses, but I don't understand how to
confirm whether the client receieves the correct DNS address when
it connects and/or how to set the correct DNS suffix. Where do I
check the office domain name?

Thanks.
Mustafa

Bill Grant wrote:



You should be able to access your office machines by their DNS
names. Does the client receive the correct DNS address when it
connects? As well as the correct DNS server address, you need to
use the correct DNS suffix. If your office domain name is
company.com , then you need to put this in the connection
properties of the VPN client. If you don't, you will need to use
the FQDN of the machines (eg
machine.company.com) to resolve thier names to IP addresses.

Mustafa wrote:




thanks for the info, one more clarification if you please:

1. i also lose my local internet connection when connected to
the VPN. any ideas?

2. when i'm on my laptop at my apartment (where we also have a
router), my local IP is something like 192.168.1.105 or
whatever. if I'm trying to access a computer on the network
that I'm connecting to via the VPN (say my office pc), and its
IP address at the office is 192.168.1.105, isn't there a
conflict at this point? even if the IP's differ, when I type
//192.168.1.105 or whatever how does the network know which
"192.168.1.***" network I'm referring to? 3. Can anyone please
point me to information regarding WINS/DNS
and how to set it up so I can access my office resources via VPN
by name? As I mentioned, I have zero experience regarding this
subject; I'm just trying to set it up so we can share resources
when on the road. Thanks again, much appreciated.
Mustafa

Bill Grant wrote:




A VPN link doesn't carry broadcasts, so you cannot resolve
names by broadcast. If you are not using DNS or WINS, you will
need HOSTS or LMHOSTS files on the client to resolve names to
IP addresses. Mustafa wrote:





Hey All!

Thanks for the help. I think I found the error, my router is
set up to assign IP addressed from a pool and the RAS server
wasn't expecting that. I made the change to assign addresses
from the same pool and now I can at least connect to the VPN.

Now, I cannot access resources it seems. When I try to go to:

\\computername

it tells me it is not accessible. Is there some other way I
should refer to the computer?

Thanks again!
Mustafa

Robert L [MS-MVP] wrote:





ras error 733 is tcp/ip protocol or dhcp issue. do you have
DHCP? quoted from
http://www.howtonetworking.com/raserrors.htm *Error 733*: the PPP
control protocol for this network
protocol is not available on the server.

Resolution:
1) Ensure that the TCP/IP protocol is installed on your RAS
server and that the TCP/IP protocol is selected in the Server
Settings of the Network Configuration option of the Remote
Access Setup dialog. 2) If you have the "Use DHCP to assign
remote TCP/IP client addresses" option selected for the
TCP/IP protocol in the RAS Server Settings, then ensure that
you have installed DHCP and
that it is not disabled. 3) Ensure that all of the bindings
for TCP/IP are enabled in the Bindings tab of the Network
dialog of the Control Panel. Be sure to
inspect the TCP/IP Protocol and WINS Client (TCP/IP) bindings
for all adapters, all protocols, and all services. If the
TCP/IP bindings are corrupt, you may have to reinstall TCP/IP
and or RAS in order to clean up the bindings.

Don't send e-mail or reply to me except you need consulting
services. Posting on MS newsgroup will benefit all readers
and you may get more help. Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Mustafa" <[email protected]
Hello Everyone,

We have a static IP address at our office, this line comes
into a Netgear MR814v2 router which has been configured so
that it forwards the
ports 1723 and 499-501 to our Windows 2003 server. This
server is set up
as our VPN server. It only has one Ethernet card in it which
is connected to our router. Via the RRAS panel, I've created
the policy to allow VPN connections and when I try to connect
to the VPN via another computer running Windows XP sp2 either
by using the server's local ip (192.168.1.184) or our static
external IP, I get the same error, #733. Oh, also, our Server
is not a domain server. It is merely to be used for
things like file serving, web serving, etc.

I'm very new at this as network administration is not my
background; we are a small company and just want to get a VPN
server set up so we can access our local resources when
travelling. Thanks in advance for any and all help.
 
Back
Top