windows xp vpn issue

[cybertech]

Hi all, been having an issue with setting up a windows xp vpn connection,

i can connect to vpn on win xp but cannot file share.

IP addresses currently are

Server ip is

10.0.0.1
255.255.255.0
10.0.0.138

client ip is
10.1.1.10
255.255.255.0
10.1.1.1

the vpn has been set to dhcp and also static

when its static i have been using

192.168.1.1
192.168.1.5

when vpn connects both computers connect using one of these ip addresses, i can ping both of these addresses in cmd, if i click start, run \\servname\share it cannot be found, if i \\192.168.1.1 or the local ip of 10.0.0.1 same message.

network N/H does not display the server pc, both are on the same workgroup, no domain is involved at all, the router at the server side has all ports and internet firewall turned off, also windows firewall and avg free on both machines are turned off.

I have search and searched but cannot find a resolution, all references are saying how easy it is to do.

Please Help

Thank you
Matt

[Aboulaly]

Sorry mate, I am not that good with networking, but one question, with your client IP you have it as 10.1.1.10, shouldn't it be 10.0.0.10 because your server is 10.0.0.1 and not 10.1.1.1, just a thought mate.

[crypto7]

Not to clear on your setup. But I am thinking its a routing issue.

Is it a pptp vpn ?
Does the client VPN to the Server?

Do a "route print" on the server and the client (while the vpn is up) and have a look at the routing tables.
When the packet leaves a computer it SHOULD leave via the interface (and use that ip) to talk to the remote end. So if the client PC has 192.168.1.5 as its VPN ip, and the Server has 192.168.1.1 then Those are the IP Addresses that you should be using for client to server comms. So check the routes for those networks and ensure the are via the VPN.

If you want other hosts on each to talk, then you may need to add other routes.

Also check the firewall settings on the VPN settings.

Using the Windows names is not a stable way to do things unless the are in a DNS server and can be resolved via a FQDN.

Last time I setup a PPTP Server it was like this..
Server IP : 192.168.1.1
Server Mask : 255.255.255.0
Server GW (what ever the router is)
Server VPN IP Pool - 192.168.1.10-20

When a client conneteded it got a 192.168.1.x number as worked as if it was on the same LAN as the server. I also made sure the default route on the client as NOT from the VPN, as I only wanted traffic to the remote network to go via the VPN all other traffic via its own links.

[cybertech]

Thank you both for the reply, i have taken steps to issue the ip address to the same as the server pc, still no sucess, will try and explain everything clearly.

Im trying to setup a PPTP client to server vpn.

The modem on the server is a bigpond modem. the modem ip details are

10.0.0.1
255.255.255.0
10.0.0.138

I have opened port for pptp - have also turned firewall completely off and tried.

My system is a netgear wireless router.

ip address are

192.168.0.2
255.255.255.0
192.168.0.1

on the xp vpn server connection, under tcp/ip in properties of vpn, i have tried both enable dhcp plus specify, when dhcp is enabled it sets the following ip address

xp server
10.0.0.30
255.255.255.255
0.0.0.0

client
10.0.0.31
255.255.255.255
0.0.0.0

if i specify ip address, within range still same message.

I can connect to vpn no problem but cannot file share, have set up a new login profile with password to use to connect, have shared c: out with full support. have also tried my docs

from client to server i can ping multiple ip,

both the router ip, the server ip, plus the vpn ip.

if i click start, run type in \\10.0.0.30\c comes up unable to connect
if i try \\10.0.0.1\c it also has the same message

the same if i do it in my computer address bar, also server name does not appear in network neighbourhood of client pc

[cybertech]

Hi attached are images of vpn connection and route print. hope this helps.

I have changed all ip addresses on my router, vpn ip to be within range of server router

[crypto7]

Does either end have a firewall on ?
If you can ping then then ICMP Packets are getting through.

Can you setup a http server on one of the end and try to connect to that to see if HTTP (thus TCP) is working OK.

Check you firewalls on each end. If on, turn them off for testing. if it works after that, then you will need to tune the rules to allow file sharing traffic.

[cybertech]

thank crypto, i have will try the web server tonight, in regards to the firewall
windows firewall is disabled on both machines, antivirus is disables.

through the bigpond 2wire modem i have opened the port for pptp, is there a seperate port i need to open for file sharing perhaps, i have also connected my notebook into his router and connected via vpn locally, and i could file share no problem if that helps any further

[crypto7]

If the PPTP Connects and you can ping the computer at the remote end then both Protocol GRE (IP Protocol 47) and TCP (port 1723) port are open so your edge filewalls should not be the issue.

Assuming a setup like this

Computer1 -> PPTP VPN ---> Internet modem - INTERNET <--- Internet Mode <- PPTP VPN <- Computer2

Then the Internet Modems will only see the PPTP traffic and will not know anything about what Computer 1 and 2 are doing. So as long as you can ping C1 to C2 then it will be a setting at either end.

From memory, TCP Port 1723 is used to establish the PPTP and logon, then GRE is the actual Tunnel (ie: if could could connect but not send data).

[cybertech]

Hi everyone still no sucess.

have been trying for a few weeks now to get this vpn going, followed crypto messages but something is still not right, i can ping all ip addresses from client to server but still cannot file share, following setup is.

server has bigpond adsl modem - firewall port 1723 is open also 47
its details are

10.0.0.1
255.255.255.0
10.0.0.138

client pc am using 3g wireless modem - so no router involved at all.

when creating vpn connection on server i use the following details

specify ip which is - have also tried obtain ip
from 10.0.0.10
to 10.0.0.20

tick box enabled allow callers to access my local area network.
in network protocols there is
Internet protocol (tcp-ip)
file and printer sharing
QOS Packet Schedule
Client for MS Networks

so click ok to that.

setup a new connection on client machine (vista) - server machine is XP
connection name is VPN
IP address i use wan ip - sourced from
username and password - i created a completely new login on server with password.

under properties of vpn on client in security.

i have tried Typicall (recommended setting) also Advanced MS-Chap-2

under networking menu on client there is
type of vpn have tried automatic aswell as pptp vpn
tcpip ver 6 - have tried ticking that, aswell as unticking
tcp - ver 4 - set to obtain ip
file and print sharing
qos
client for ms windows

ok click connect, connects fine, authenticates fine and gives me an ip address.

in cmd

i can ping server bigpond modem of 10.0.0.138
i can ping server lan ip address of 10.0.0.1
i can ping vpn server ip address of 10.0.0.10

i have files shared out both c drive also my documents.
if i open internet explorer and type in 10.0.0.138 on client machine, i can see bigpond router page.

if i go to network neighbourhood on client pc, only client pc appears not server, both computers workgroup is set to mshome

if i go to start type \\10.0.0.1 or \\10.0.0.10 i get the same message cannot find path - i am aware i need to be using \\10.0.0.10 to file share but have tried all possibilites.

Thank you hope someone can help
Matt Carter

[crypto7]

Not that I think this is needed, as your are allowed to use IP address in replace of hostnames is drive connections.

eg: Let say you have a share on 10.0.0.1 called MyFiles and the server name is Server1
then \\Server1\MyFiles is the same as \\10.0.0.1\MyFiles
things like name resolution dont tend to work over wan connections unless a fully working DNS server or WINS server are running (a big ask for a 2 computer link).

The server/client may (for some reason) not like using the IP address and really want a host name.

So, try this.
Edit your HOSTS file
Should be location under the windows install folder
eg:
c:\windows\system32\drivers\etc\hosts
Note: there is NO dot or extension.

In that file add a line for your host
eg:
10.0.0.1 Server1
Save and exit.

To test, open a command prompt window and type in the host name
ping MyServer
If it pings OK, you know the Host to IP mapping is working.

Now try the share again
\\Server1\MyShare

Note: you should not have to restart anything after you edit the file, but it may pay to clear you DNS cache
ipconfig /flushdns

[cybertech]

Thanks crypto but still no sucess,

i updated the hosts file.

the only thing that is in that file now is.

10.0.0.10 officepc

saved and exit. cleared the dns and could sucesfully ping officepc.

i am thinking i might try a different modem the reason for this is.

It connects fine but can file share, if i disconnect and try and connect again it can fail - even without changing any settings at all. so i think the next step is replacing the adsl modem, also today i purchased a dlink 130 vpn router, do you think this will also overcome the issue.

[cybertech]

sorry spelling mistake, it connects fine but cannot file share rather then it can

[PaulD]

Sorry to wade in but I've recently had this problem.

Once your VPN is connected, open Explorer and type in the address bar \\ followed by the ip address of the computer you want to browse the folders of eg
\\192.168.1.103 (or whatever it is - this is the local ip address on its network)

It worked for me, I'm sorry if you've already tried this.

[cybertech]

Hey everyone, thought i would give you an update of what i have been trying with vpn.

I had given up on the software vpn as i just could not get file transfer to work. so i thought i would go purchase a hardware dir-130 dlink vpn router.

setup took me around 30 minutes, got connected fine but the exact same issue. This has been doing my head in the weeks now.

so i thought i would start eliminating some things, firstly eliminated server pc, took vpn to different computer and tried to share files, same issue, then changed client pc and vwala, it works 1st time everytime.

Have tried on several different client computers and works fine, even tested software vpn and straight away all good, dont know what it was on first computer that was causing it, has avg free, tried disabling it, windows firewall on and off, disabled all tasks running, reset 2wire bigpond adsl modem to manufactures settings, still same issue. next step is to take a notebook there and eliminate either the modem or the desktop pc.

Thank you all for your help

Crypto - much appreciated