cancel
Showing results for 
Search instead for 
Did you mean: 

Interpreting the Event Log

FIXED
Dabbler
Posts: 23
Registered: 2 weeks ago

Re: Interpreting the Event Log

Amended your filter with a bit of googling?  Does 'tcp.port == 1723 or gre' look ok?  Have connected via mobile now and results are as follows...

ws_a.PNGws_b.PNG

Superuser
Superuser
Posts: 9,141
Thanks: 2,227
Fixes: 160
Registered: ‎30-07-2007

Re: Interpreting the Event Log

Well the port forwarding of port 1723 to the server is definitely worki. You can see it trying to setup the connection.

Is there still nothing in the server logs ?

I use a pptp vpn to the office , so if you don't get anywhere in the mean time I'll look at my connection with wireshark tomorrow

Dabbler
Posts: 23
Registered: 2 weeks ago

Re: Interpreting the Event Log

Kids and life got in the way!  Will have a look this evening.

All Star
Posts: 671
Thanks: 429
Fixes: 1
Registered: ‎27-12-2019

Re: Interpreting the Event Log

@Turtlestacker You may well have seen this already but equally it may well be the answer you are looking for.

https://docs.microsoft.com/en-us/windows-server-essentials/manage/manage-vpn-in-windows-server-essen...

 

Superuser
Superuser
Posts: 9,141
Thanks: 2,227
Fixes: 160
Registered: ‎30-07-2007

Re: Interpreting the Event Log

Fix

Having looked at the wireshark trace again, the problem is that the tunnel isn't initialising. The initial PPTP connect is getting to the server and being accepted but It looks like the GRE traffic from the server isn't getting back to the client. Eventually the client gives up and closes the connection.

Mobile networks often use CG-NAT and I wonder whether the GRE traffic isnt routable back to the client. A similar conclusion here https://community.plus.net/t5/Fibre-Broadband/PPTP-or-L2TP-VPN-in-stopped-connecting/m-p/1765311

TBH I'm never sure what CG-NAT is capable of or not. If it is a GRE routing problem then I suspect it is going to be similar when tried via a Cyberghost connection as well.

@Turtlestacker going back to @Dan_the_Van s suggestion earlier , have you got anyone who could try a VPN connection from a normal broadband connection ? That would help identify whetehr the problem is down to the mobile/Cyberghost connection

Dabbler
Posts: 23
Registered: 2 weeks ago

Re: Interpreting the Event Log

I nearly cried when I saw this ... Capture.PNG

here https://community.spiceworks.com/topic/2269902-pptp-vpn-setup-on-rras-server-not-working

So sure enough I setup for IPSEC (more secure anyway apparently) and it just blooming worked!!

Sincere thanks to all - particularly @MisterW - you were so helpful and helped lift me on a real learning journey.  No I shall go and weep for joy!  Thanks!

Superuser
Superuser
Posts: 9,141
Thanks: 2,227
Fixes: 160
Registered: ‎30-07-2007

Re: Interpreting the Event Log

@Turtlestacker glad you got it sorted.

I had thought about suggesting IpSec or OpenVPN but really didn't want to muddy the waters whilst we were trying to understand why PPTP wasn't working. I wasnt aware that Iphone completely dropped support for PPTP as I don't have an iPhone. Presumably you weren't using one either as whatever you were using was at least attempting to make the connection.

Anyway, as you say IpSec is much more secure so you're better with that anyway.