Urgent! PPTP link doesn't work between MT & Windows-XP

Hello everybody,

I am having problem with establishing PPTP link between my MT’s 450 RouterOS server and Windows XP Client. I have been done everything from documentation to configuring my PPTP server and XP client, but I can’t establish PPTP link over INTERNET. I am able to access RB450 router while within the same attached LAN network through my Windows XP client, but when i try to access RB450 from outside (over INTERNET) it drops the connection and when connecting process goes through its “verifying username and password” process it gives me an error message “Error 619 a connection to remote computer could not established, the port used for this connection was closed”. Below is my configuration for PPTP link between MT 450 server and Windows XP client:


RB450 setup at remote location:
Winbox—> menu—> IP—> Routes—>add(+)----> Destination:0.0.0.0/0----> Gateway: 192.168.0.1 (default internal IP of NetGear ADSL modem+router)----> Apply—> OK.

Winbox—> PPP—>Secrets---->Add(+)---->Name:ppp1—>Passward:*****------>Service:pptp
------>Profile:default------> Apply----->OK.

Then PPP—>Interface----PPTP-Server---->Name:pptp-in1---->User:ex1—>Apply—>OK.
Then PPTP-Server:Enable—>mscacp1, mschap2.

NetGear’s ADSL modem+router setup (model No:DM111PUSP)

http://192.168.0.1---->web interface-----> Advanced Setup----->Port Forwarding ---->Application Type: PPTP VPN---->Add----> External Packet: All-----> Protocol:TCP,RGE ----->Port:1723,47 ----> Internal Host IP:192.168.0.x (assigned by adsl modem+router to MT RB450 through its DHCP server)----> Save.

Firewall Rules: Disabled ------>Save

DNS----> add DDNS----> HostName----> hostname.dyndns.org----> Username: Username of hostname account---->password: used password with hostname account---->Save/apply.

PC at Home:

Network connections----> create new connections---->connect to network at my places---->VPN connection----->company name:Mikrotik---->Public network: select don’t dial the initial connection—>VPN server selection----> Host name or IP address: hostname.dyndns.org—>Finish
—> connect Mikrotik window pops up-----User name: ex1(used with pptp-server in secrets at RB450)—>passwoad:*****(used with pptp-server in secrets at RB450) ---->“verifying user name and password”------> Error619: Unable to establish VPN connection with remote computer.


Please let me help in establishing this VPN connection and let me know where and what i am missing in the pptp configuration as i have been tried every configuration at both ends one-by-one with no PPTP link connectivity. Any one there who can please fix this problem and guide me where i am making mistake in this setup and let me assist further with the configuration.

Once again any help will be appreciated greatly.

Sincerely,
Paams

are you sure your internet provider doesn’t block GRE protocol?

p.s. 47 isn’t port, it’s protocol ID: TCP=6, GRE=47

UPD: I think, you’d better setup your modem in Bridge mode, not Router

Hi Chupaka! I am very much sure that my ISP at remote location with MT RB 450 connected doesn’t block GRE protocol and other ports. I have been tested with different port checker programs to check all the necessary ports and protocols for PPTP communication.

I had also set this netgear DSL modem+router into bridge mode to access MT directly from it, but it lost the internet connectivity to attached MT RB450 behind it, ISP providing internet connection through PPPOE connection and netgear modem+router is configured with PPOE connection and acting as a DHCP server and using MT RB450 with both configurations as a PPPOE client and a DHCP client, but with one client at a time. Could you please let me know the procedure how to setup a DSL modem in bridge mode to access internet from ISP directly to MT router and access MT router directly without using modem as a router just as a bridge only. Also there are no firewall and NAT rules configured at MT RB450 for PPTP connectivity.Do i need to have add some firewall and NAT rules for PPTP connectivity from public access to internal access? If yes, please explain.

Looking for your further assistance.

Thanks,
Paams

I mean, maybe your modem cannot dst-NAT the GRE protocol…

so simply switch your modem to bridge mode, and establish PPPoE session from the RB, not from the modem

Hi Chupaka! Thanks to keeping assisted me. Okay! after switching the neatgear modem to bridge mode, could you please let me provide the Winbox configuration how to establish PPPoE session for RB450 and running a DHCP serve on it to its DHCP clients as i am already running DHCP server on RB450 for its DHCP clients on its LAN ports and last time when i switched my modem to bridge mode i got lost my internet connection to RB450 and connected network to RB450? I want to give it a try once again according to your configuration for modem as abrige and RB450 as a PPPoE client. Also i think at this time it can solve my MT and Windows XP PPTP connectivity problem.

Hoping your full configuration assistance for this setup with Winbox or through Console Window.

Thanks,
Paams

well, I think it’s better to get there and don’t try to setup this remotely =)

then simply switch the modem to bridge and create pppoe client directly to your ISP: http://www.mikrotik.com/testdocs/ros/2.9/interface/pppoe.php

Thanks Chupaka! I’ll get to the remote location to configure it as per your guide and let you know about it after coming back. Till then have a nice time.

Paams

Hi Chupaka! I have switched my Neatgear DSL Mode+router at remote location in bridge mode and run PPPoE and DHCP client session one by one at RB450, but i am afraid to say that none of these sessions worked. PPPoE client remained in dialing... and disconnecting mode, while tried DHCP session, keeping PPPoE session OFF, it keeps remaining in search mode. Then i started an auto detection process to check connection type from the ISP and get these conclusions for the connection type from ISP:


Scanning internet connection type:

PVC(8/35): No response
PVC(0/38): No response
PVC(0/35): Detected a PPPoE LLC/SNAP connection type from your ISP.

Back Next....

and setup this connection at modem/router for internet access. At this connection RB450 worked well for both as a PPPoE client and DHCP client with no problem at all.

Wait Pls! got something! i mess with the configuration at modem+router end and i got that DHCP must be ON at modem to get access to internet at RB450 and i kept it ON. Secondly what extra things i did that i selected the "PPP IP extension" option with default route and deselected the "NAT" option at DSL modem+router for WAN setup and restart it. I didn't get any such options in the menu bar after restarting Modem+router, such as port forwarding, DMZ, Dynemic DNS, remote access etc. But RB 450 get still connected to the internet with DHCP Client session and got the same Public IP address and gateway at ether1 interface at RB450 as is shown at the Modem+router's WAN connection status window assigned by ISP. PC connected to internal network is getting ip address assigned by DHCP server at RB450 with accessing internet without any problem. I didn't used to get this type of IP address and gateway before ether1 at RB450, before IP address at ether1 was the assigned IP from DSL Modem+router's DHCP server and gateway was it default internal IP i.e 192.168.0.1 (for netgear).

What do you say? please let me know is it a correct configuration? I think now modem is actully bridged with RB450 and right configuration to make the PPTP link work between RB450 and windows XP. Sorry! i can't check for PPTP link today because of shortage of time, but try it tomorrow and let you know.

Waiting for your further assistance.

Thanks,
Paams

Hi Chupaka! afraid to say the problem still persist with Error: 619 while my PC verify userneame and password to establish connection with PPTP server at RB450. I think this is not the problem between modem and RB450, because connection drops when it verify user name and password. It means PPTP client is negotiating with Sever, but can’t access it, please correct me if i am wrong. I have been double checked with the PPTP server configuration and its okay! Thats why because when i connect my PPTP client PC with RB450’s local network it establish PPTP link with RB450 after verifying user name and password, but drops connection when i try to access it from outside (internet). I seems that it requires proper configuration for firewall and NAT rules at RB450. Please help me with necessary firewall rules for PPTP link at RB450.

Thanks,
Paams

you don’t need NAT rules if you connect directly to RB’s IP. do you check the connection from the same computer?

Yes Chupaka! With the very same PC as i am using laptop installed with Windows-XP client and working fine with RB’s LAN, but not from outside (internet).

paams