Vista PPTP connection

Message

#1 Post by **jdhurst** » Sun Apr 20, 2008 12:02 pm

I use Juniper Netscreen VPN (IPSec) for most of my clients. I have one new client that uses PPTP VPN (which is the built-in Microsoft Client).

I have no trouble with XP Pro on either my Laptop or my Desktop.

I set it up on Vista Business 64 and I cannot form a connection. I set it up the same way:

General: Give it the remote address
Options: Uncheck Windows Logon Domain (not needed)
Security: Typical - require secured password and require data encryprition.
Networking: PPPTP VPN (***)
Sharing: Unchecked

(***) XP Machines use Auto and have a couple of settings to check. Auto in Vista engages IPSec which I don't want, so I chose PPPTP. Neither Auto or PPPTP work.

I try to connect and it goes to the first stage (transmit out) but never receives an authentication back. Just sits (forever, apparently).

I tried disabling the firewall (Symantec Endpoint 11), but on checking, there are no entries in the traffic log with Endpoint enabled or disabled.

In the Networking properties, I unchecked TCP/IP V6 (leaving V4 checked), but that made no difference.

Has anyone succeeed in using Vista to make a PPPTP connection (MSCHAP). Like I say, XP is no problem.

... JDH

steveh · #2 Post by **steveh** » Sun Apr 20, 2008 1:57 pm

I have over 50 of these connections (to connect to clients Oracle databases). Standard MS connections PPTP, security tab:typical, requires secure password, require data encryption, IPv4 and IPv6, no sharing. Used with Vista Business, no issues. Also using standard Windows firewall (which may be your problem).
I also use SonicWall and Nortel VPN connections with no problem.

Steve

#3 Post by **jdhurst** » Sun Apr 20, 2008 2:26 pm

Thank you for that. Still no joy on my part, although I reviewed everything you wrote and everything I did. I also ensured Windows Firewall to be off, and turned off Symantec Endpoint as well.

There is no traffic back (send request, nothing returned). I will check the client end this coming week. There maybe something there I have overlooked. I did not set it up in the first instance.

I also verified that my XP machines continue to make connections at the same time and over the same connection.

Any other comments and suggestions will be most welcome.
... JDH

K0LO · #4 Post by **K0LO** » Sun Apr 20, 2008 4:36 pm

jdhurst:

I don't know anything about MSCHAP, so this is at best a guess. Does MSCHAP use NTLM authentication? If so, one of the changes in Vista is that NTLMv2 is the default protocol, whereas XP machines have NTLM as the default. If your server doesn't understand NTLMv2 then authentication will fail.

You can change a setting in Vista to allow it to try both new and older authentication protocols. Start GPEDIT.msc and navigate to Windows Settings -> Security Settings -> Local Policies -> Security Options.

Change "Network Security:LAN Manager authentication level" from "Send NTLMv2 response only" to "Send LM & NTLM - use NTLMv2 session security if negotiated".

#5 Post by **jdhurst** » Sun Apr 20, 2008 5:32 pm

Thanks again. I tried the NTLM suggestion with no success. I installed a temporary copy of CommView (three machines is too many activations) but it was a full licensed version, and it showed zero traffic back from the host. I restarted the Vista machine to ensure no problems from that point of view. By contrast, I see inbound traffic on the XP machine.

I need to review the client end as there may be something there preventing my connection. ... JDH

#6 Post by **jdhurst** » Sun Apr 20, 2008 6:19 pm

Steveh - Are those instances of Vista Business 32-bit or 64-bit? I don't know whether that would make a difference, but I have had some wrinkles with running software in a 64-bit machine. Most stuff seems to be working, but I would be curious for your setup.
Thanks, .... JDH

#7 Post by **jdhurst** » Mon Apr 21, 2008 5:25 am

Yesterday I re-imaged the Vista laptop (my plan was always to try everything, re-image and start fresh - heading for production).

I tried the built-in VPN as the first and only thing "out-of-the-box" and it did not work. So it is either the remote end (I will check) or something about 64-bits. ... JDH

Pharfignewton · #8 Post by **Pharfignewton** » Mon Apr 21, 2008 7:16 am

jdhurst,

I had similar issue trying to pptp to my home server using vista client. This is how i fixed my problem.

step1: disable windows firewall
step2: make the pptp connection (which in my case was successful)
step3: disconnect pptp vpn
step4: re-enable windows firewall

I can now pptp with vista all the time. I think somehow vista firewall was dropping the gre traffic, but once i made a successful connection everything is ok after that.

Cheers.

steveh · #9 Post by **steveh** » Mon Apr 21, 2008 8:03 am

These are 32bit Vista instances, but frankly in the network stack this should make no difference as I believe the code base is the same.

Since I see that you said you did not set this up, why don't you setup a VPN connection from scratch on your end (takes all of 2 minutes), and see if this connects. Just making your settings here the same as your XP machine will be fine.

Steve

jdhurst wrote:Steveh - Are those instances of Vista Business 32-bit or 64-bit? I don't know whether that would make a difference, but I have had some wrinkles with running software in a 64-bit machine. Most stuff seems to be working, but I would be curious for your setup.
Thanks, .... JDH

#10 Post by **jdhurst** » Mon Apr 21, 2008 8:18 pm

I followed the recent advice and no connection. I believe the comment that 64-bit vs 32-bit likely makes no difference. It must be the host (client) end. ... JDH

Vista PPTP connection

Vista PPTP connection

vista pptp

Who is online