problem with wingate vpn (not accessible)

[ishiprog]

Hello everybody,

everytime i host an vpn no client is able to access or to ping my server. ever i cannot ping the clients. the vpn connection is up and i can see the clients with their network identifications, but not access or ping.
we ar working all with routers from different companies - would you please so kind to send me the new driver ?

please excuse my bad english - i'm not really a native english speaker ;)


thanks in advance

ishiprog

edit:

wingate version 6.0.4 (build 1024) on both sides
vpn host windows 2000 professional
vpn clients windows xp sp2
both sides are configured to participate local network

screenshot:
[/img]

[genie]

Hi,

I can send you the updated drivers for your server and the clients - it might help you with getting clients through.

[ishiprog]

Hi,
That would be realy great - thank you ver much for your fast reply!

ishiprog

edit:

sorry - i'm an idiot :) my email adress is

ishiprog@ishi-family.de

[genie]

New drivers have been sent to you.

[ishiprog]

Hi,

after installing the new drivers for xp and 2k we have to recognize that we have still no success - thats very sad, because we are more than 15 users who want to use your application.
Maybe we are completely wrong and our configuration is false. So i will post another screenshot which shows the entire network tableau of win vpn.

for your help many thanks in advance


ishiprog

[genie]

Ok, actually it was the first thing to check - make sure that all the routers and gateways that protect your clients and the server have port 809 (both UDP and TCP) open - otherwise data channel traffic will be blocked.

[ishiprog]

Hi,

the port 809 is forwarded in every router to the machine which is running wingate vpn - no additional firewalls were used - the xp-firewall is deactivated.

[genie]

Are you sure that both TCP and UDP ports are forwarded? Because Wingate VPN uses TCP traffic for control channel and UDP traffic for data channel

[ishiprog]

yes, we are shure about the port-settings (double checked that the option "both" is selected for the traffic type in the virtual server section of the routers.

[genie]

One quick question - on the server side - do the clients have their default routes set through this Wingate machine or have RIP clients running there?

[ishiprog]

one quick answer ;) - on the server side is only one machine which is the server and - yes this machine is running the RIPClient.

[genie]

:) thanks - actually I meant the other side. Besides, you don't need RIP client on Wingate machine itself.

[ishiprog]

on the client side the RIPClient is also running

[genie]

Ok, then - can you send me routing tables from the clients and Wingate machines, please?

[ishiprog]

in a few hours the client will be avaiable for me again - then i will post the routing tables here - thanks for your support

[genie]

Thanks - I will get back to you as soon as I receive them.

[ishiprog]

WOW - what a quick client - here are the routing tables :)

client routing table:



server routing table:

[genie]

Ok, let's re-iterate it:

1. You have two computers running Wingate - there is a VPN tunnel between these two. you can establish the control channel (that is connect from the joiner to the server) but neither can you ping joiner from the server nor can you ping server from the joiner using their IP addresses. Both computers are behind NAT/gateways in which port 809 is open for both UDP and TCP traffic. You have tried installing new QBIK driver on both sides, rebooting the machines after installing this new driver.

Phew... Did I miss anything?

[ishiprog]

that's an absolutely exact description of the given situation

[genie]

Yet another quick question - you are not runnin any other firewalls on these machines, including built-in Windows firewalls, are you?

[ishiprog]

Sir, no, Sir - no extra firewall on the serverside (win2k) and deactivated biult-in firewall on clientsid (winxp)

[genie]

Can you, please, export the configuration for the VPN server and send it to me? Also, it would be great if you send me a user name and password to try the tunnel so I would be able to try and connect to it from our test lab and see what the traffic flow would look like.

[genie]

Hi,

I have one idea which I would like you to check - mind if I send you an email with the details?

[ishiprog]

Hi!
I will send you the email with the exported configuration and the contact details next monday (18th Juli) because my family and me are on a little vacation (btw to the clients of the vpn connection :-)).
We hope you will be so patient to support us then again.

ishiprog

[genie]

Sure - no problem, thanks!