0

One of my users cannot vpn into my network and is getting a "connection refused" error.

So, I'm using Win2K Routing and Remote access for vpn, via PPTP. However, other users have no problems getting in and this particular user is able to telnet into the server at port 1723 without a failed connection (though obviously he can't do anything after telnetting in). I am able to VPN using his username without a connection refused error (I get accessed denied instead). He has turned off all of his firewalls and is just using a linksys router. He is able to vpn into other machines.

The protocol in use for Logon Security is RSA Security EAP (encryption enabled)

Any ideas?

Brian
  • 313

3 Answers3

1

It sounds almost certainly like it is a problem with his client.

First step would be if he has somewhere else he can VPN to (probably not), to test that. Otherwise, go over the config details and make sure they are correct (including any passwords) Finally, remove, and re-install the client.

One other option - if your system uses passwords that could be locked out - check that.

If you know how to use tcpdump or something similar, you could also watch to see if you can see traffic from his IP address when the actual client is being used to connect.

Brent
  • 24,065
1

I think your problem is on the link on the provider. Try to reduce MTU on the link on windows with registry key in this article :

support.microsoft.com/?scid=kb%3Ben-us%3B900926&x=15&y=8

You must reboot the computer before give it a test ;-)

Yves

0

Is the user getting a specific error?

One problem that I've seen in my own environment is one of the users has a switch or router somewhere along the way that is preventing all of the traffic. For Windows VPNs, you need ot have port 1723 open, but you also need the ability to pass along GRE traffic[1]. This prevented the link from being established and the end user was getting an "Connection Refused" error.

[1] read about it here en.wikipedia.org/wiki/Generic_Routing_Encapsulation