Virtual Private Networks Configuring VerizonFiOS for VPN passthrough

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Configuring VerizonFiOS for VPN passthrough daveh551 04-05-08
Posted by daveh551 on April 5, 2008, 9:05 am
Please log in for more thread options
It seems like this should be a fairly common topic, and probably
addressed elsewhere, but searching this and other groups as well as
googling has failed to yield anything useful. I posted this in
comp.security.firewalls, but maybe this is a more appropriate group

My home network is on a FiOS internet connection, which runs through a
Verizon (ActionTec) wireless router/switch.(WI1524WR or something like
that) I have 3 machines, a Windows 2000 server acting as domain
controller, a Compaq desktop running Windows XP Pro (SP2), and a Dell
laptop running Windows 2000 Pro (SP4). I am trying to configure the
router to pass VPN requests through to the XP machine so I can access
it with the laptop from outside. I have Windows configured to respond
to VPN requests, and have the laptop configured to connect as a VPN
client. The connection made from inside the firewall (directly to the
local hostname) works fine. I also have a second connection configured
to go through the external IP, and connecting to it always fails with
an Error 678: There was no answer. This is true whether I am
connecting inside the house, or from a WiFi hot spot. The two VPN
connections (local and remote) are configured identically except for
the hostname, so I believe the VPN client and server setups are
correct. I think it has to be the router configuration for VPN
passthrough. (The FiOS IP is dynamic, but I've got it set up to route
through dyndns.org).

The "Port Forwarding" screen on the router is showing setup to pass
the following protocols through to the XP desktop:
(I'm not sure exactly what all of these mean, I just configured from
bits and pieces I found in different articles, using the configuration
menus available on the router)
GRE
L2TP-UDP Any ->1701
IPSec - UDP 500-> 500
ESP
AH
TCP Any -> 1723

When I attempted to connect over the VPN connection from a WiFi
hotspot, this is what appeared in the router security log (newest is
on top, so read from the bottom)

Apr 3 10:00:54 2008 Inbound Traffic Connection closed TCP
192.168.1.152 1723 <--> 71.170.239.192 1723 [71.97.118.241 45717]
CLOSED/SYN_SENT clink0 Incoming STATIC

Apr 3 10:00:54 2008 Outbound Traffic Connection
closed TCP
71.97.118.241 45717<--> 71.97.118.241 45717[192.168.1.152 1723 ]
SYN_SENT/CLOSED br0 Outgoing

Apr 3 10:00:53 2008 Outbound Traffic Connection
opened TCP
71.97.118.241 45734<--> 71.97.118.241 45734[192.168.1.152 1723 ]
CLOSED/CLOSED br0 Outgoing

Apr 3 10:00:53 2008 Inbound Traffic Accepted - Service TCP
71.97.118.241:45734->192.168.1.152:1723 on clink0

Apr 3 10:00:53 2008 Inbound Traffic Connection opened TCP
192.168.1.152 1723 <--> 71.170.239.192 1723 [71.97.118.241 45734]
CLOSED/SYN_SENT clink0 Incoming STATIC

(192.168.1.152 is the local IP of the XP desktop. 71.170.239.192 is
the external (FiOS) IP of the router, 71.97.118.241 is the IP of the
hotspot where I was sending from.)

Can anyone tell me what I am doing wrong and what to do to fix it?

Thanks.

Similar ThreadsPosted
Configuring VerizonFiOS for VPN passthrough April 5, 2008, 9:05 am
VPN Passthrough on a SMC2804WBR Router March 30, 2006, 6:58 am
WAG200G VPN PPTP passthrough December 27, 2006, 3:28 pm
VPN Between two Netgear FVS318, and VPN passthrough to Server 2003 June 28, 2005, 8:41 am
PPTP Passthrough Firebox x500 to SBS2003 August 25, 2005, 7:16 am
Configuring a vpn with July 15, 2006, 4:38 pm
Configuring Cisco VPN Client / Windows XP July 22, 2005, 11:00 am
D-link DI-824VUP VPN configuring (NOOB) November 29, 2005, 9:42 am
newbie: configuring cisco 2651XM July 16, 2008, 7:17 pm
Anyone here got experience configuring a cisco 4400 controller and 2003 radius server? October 17, 2007, 8:45 pm