The XP built-in VPN client
Discussion
Just frustrated 
Unless someone knows the exact settings to get the XP client and a Zyxel 662HW-62 to talk to each other...
The Zyxel has every option known to man for VPN setups, the XP client has about three boxes to tick which don't use the same language...
Think I'l just buy the zyxel client!
Unless someone knows the exact settings to get the XP client and a Zyxel 662HW-62 to talk to each other...
The Zyxel has every option known to man for VPN setups, the XP client has about three boxes to tick which don't use the same language...
Think I'l just buy the zyxel client!
Easy peasy.... It's usually the "type of VPN" setting on the networking tab. Drop it down and set it to PPTP. If it's left on automatic it usually times out before it's had a chance to negotiate. That and software compression on the PPTP options of the same tab are the two usual candidates.
Zone Alarm can royally screw things up too if you don't create exceptions for the remote LAN and VPN endpoint IP address.
Zone Alarm can royally screw things up too if you don't create exceptions for the remote LAN and VPN endpoint IP address.
Tried that, no luck 
One end is the Zyxel with IPSEC_Tunnel(ESE & GRE), PPTP and IKE allowed incoming. the other is an XP machine behind a broadband router - no firewall on the XP box and the bb router is set to allow all outgoing. Am I right in thinking that the XP end doesnt need any more network configuration than that if it is the initiator?
One end is the Zyxel with IPSEC_Tunnel(ESE & GRE), PPTP and IKE allowed incoming. the other is an XP machine behind a broadband router - no firewall on the XP box and the bb router is set to allow all outgoing. Am I right in thinking that the XP end doesnt need any more network configuration than that if it is the initiator?
aldi said:
Tried that, no luck
One end is the Zyxel with IPSEC_Tunnel(ESE & GRE), PPTP and IKE allowed incoming. the other is an XP machine behind a broadband router - no firewall on the XP box and the bb router is set to allow all outgoing. Am I right in thinking that the XP end doesnt need any more network configuration than that if it is the initiator?
Does the BB router support PPTP passthru? It's not just ports, it's protocol 47, GRE that it should pass as well. The XP client usually just works, it's normally external influences in my experience. One end is the Zyxel with IPSEC_Tunnel(ESE & GRE), PPTP and IKE allowed incoming. the other is an XP machine behind a broadband router - no firewall on the XP box and the bb router is set to allow all outgoing. Am I right in thinking that the XP end doesnt need any more network configuration than that if it is the initiator?
BliarsGoing said:
aldi said:
Tried that, no luck
One end is the Zyxel with IPSEC_Tunnel(ESE & GRE), PPTP and IKE allowed incoming. the other is an XP machine behind a broadband router - no firewall on the XP box and the bb router is set to allow all outgoing. Am I right in thinking that the XP end doesnt need any more network configuration than that if it is the initiator?
Does the BB router support PPTP passthru? It's not just ports, it's protocol 47, GRE that it should pass as well. The XP client usually just works, it's normally external influences in my experience. One end is the Zyxel with IPSEC_Tunnel(ESE & GRE), PPTP and IKE allowed incoming. the other is an XP machine behind a broadband router - no firewall on the XP box and the bb router is set to allow all outgoing. Am I right in thinking that the XP end doesnt need any more network configuration than that if it is the initiator?
Not sure about that. I beleived the lies in the Zyxel manual about the ESP protocol in tunnel mode working over NAT with no mention of GRE. Probably need to read up a bit more on this GRE business. BB router is a DG834 w. latest firmware.
Also, the Zyxel has many options re. encryption and authentication settings, which don't seem to match up with the XP client options except for maybe MD5 authentication and Null/No encryption, which I probably wouldnt use anyway but it would be nice to have the chance!!
aldi said:
BliarsGoing said:
aldi said:
Tried that, no luck
One end is the Zyxel with IPSEC_Tunnel(ESE & GRE), PPTP and IKE allowed incoming. the other is an XP machine behind a broadband router - no firewall on the XP box and the bb router is set to allow all outgoing. Am I right in thinking that the XP end doesnt need any more network configuration than that if it is the initiator?
Does the BB router support PPTP passthru? It's not just ports, it's protocol 47, GRE that it should pass as well. The XP client usually just works, it's normally external influences in my experience. One end is the Zyxel with IPSEC_Tunnel(ESE & GRE), PPTP and IKE allowed incoming. the other is an XP machine behind a broadband router - no firewall on the XP box and the bb router is set to allow all outgoing. Am I right in thinking that the XP end doesnt need any more network configuration than that if it is the initiator?
Not sure about that. I beleived the lies in the Zyxel manual about the ESP protocol in tunnel mode working over NAT with no mention of GRE. Probably need to read up a bit more on this GRE business. BB router is a DG834 w. latest firmware.
Also, the Zyxel has many options re. encryption and authentication settings, which don't seem to match up with the XP client options except for maybe MD5 authentication and Null/No encryption, which I probably wouldnt use anyway but it would be nice to have the chance!!
Strange... the IKE and IPSEC logs on the Zyxel are completley empty, logging is enabled and it's allowed in the firewall so whats the crack there then 
I think it's trying to tell me something!
Anyway its too nice an evening to persist with this for much longer today, but thanks for these pointers it's got me heading in the right direction at least (I think). Will set up some outbound rules with logging enabled on the netgear tomorrow.
Cheers
Neil
I think it's trying to tell me something!
Anyway its too nice an evening to persist with this for much longer today, but thanks for these pointers it's got me heading in the right direction at least (I think). Will set up some outbound rules with logging enabled on the netgear tomorrow.
Cheers
Neil
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff