RAS server behing router

anaheim99 · Post by **anaheim99** » Wed Dec 24, 2003 10:34 am

Hello everybody, I have a windows 2003 server with A.D. and I installed RAS server. now, I'm behind a linksys router I forward ports 1723 and 47 to the RAS server but still no clients can connect, if I bypass the router it works fine, I enabled the log on the router to see what ports are trying to come in and I only see 1723, will this work behind a linksys router? Thanks in advance.

Post by **YeOldeStonecat** » Wed Dec 24, 2003 11:42 am

It's not port 47, it's IP type 47 (GRE)....a type of IP protocol that the Linksys must allow through. So unforward that port forwarding you did for port 47...not at all related. 1723 you must leave though...yes.

Which firmware are you using?

Also careful setting of your MTU can help.

anaheim99 · Post by **anaheim99** » Wed Dec 24, 2003 2:02 pm

I have the befsx41 firmware version 1.45.3 which is a beta they said.

twwabw · Post by **twwabw** » Wed Dec 24, 2003 2:31 pm

According to Linksys support, you do actually forward protocol 47 as a conventional service port. Must be the only way they can do it

. Can't get the silly page to come up in a hyperlink, but here's what it says:

You'll need to setup Port Forwarding to set up a PPtP tunnel behind a Linksys router. Please follow these instructions to setup the router to forwarding incoming PPtP traffic to your PPtP server:

Getting Started

1. You must set a static IP address on the server (we'll assume 192.168.1.3). If you're unsure of how to do this please go to our KB article number "KB10934010" for information on setting a static IP address in Windows.

2. Once the static IP address has been assigned please go to your desktop and double click on Internet Explorer (Located on the Start Menu in Windows XP)

3. Once "Internet Explorer" opens, please type http://192.168.1.1 into the "Address Bar" and click GO

4. The "Enter Network Password" window will appear. Skip user name and type admin (admin is the default password) as the password, and click OK

5. This will bring up the routers "Setup" section. Look under "Domain Name" and check what version of the firmware you're using.

6. You will need to click on the Advanced tab to the very right. Once the "Advanced" tab comes up please go to the Forwarding tab.

This will not work with firmware prior to 1.32

Firmware between 1.32 and 1.36:
Service Port Range > IP Address

47 ~ 47 192.168.1.3
1723 ~ 1723 192.168.1.3

Firmware after 1.36 up to 1.40m:

Service Port Range:
47 ~ 47 Protocol: Both 192.168.1.3
1723 ~ 1723 Protocol: Both 192.168.1.3

Firmware after 1.40m:

Customized Application: Vpn

Service Port Ranges: 47 ~ 47, & 1723 ~ 1723; Protocol: Both; 192.168.1.3

Also, be sure PPTP pass through and IPsec Pass through are both enabled.

Post by **YeOldeStonecat** » Wed Dec 24, 2003 2:46 pm

I saw that link TWW (pretty sure I've come across it)....but I think someone, either level 1 Linky suport, or whatever, got confused there. I'm sure you know more than I do that IP 47 isn't a port whatsoever...but an actual type of IP protocol (GRE). Doesn't make sense at all to forward port 47, that's a whole different thing.

PPTP and IPSec yes we're assuming those are both checked.

Doing a quick peek on the internet about this and Linky routers, read several sources saying peeps got it working by using Dec of 2002 firmware instead of the very latest....by only forwarding port 1723.

If it somehow works by forwarding port 47...then...well...makes about as much sense as someone's car starting up because the neighbor turned on their bathroom sink faucet.

I did this on my home LAN for a while, not a Linksys, but a Netopia. I only forwarded port 1723, and allowed GRE traffic through.

anaheim99 · Post by **anaheim99** » Wed Dec 24, 2003 2:51 pm

o.k. I follwed instructions and I forward both ports and did not work, so I forward only 1723 and still did not work. I think I might have to try a different firmware a earlier one, what do you guys think?

Post by **YeOldeStonecat** » Wed Dec 24, 2003 3:41 pm

Originally posted by anaheim99
o.k. I follwed instructions and I forward both ports and did not work, so I forward only 1723 and still did not work. I think I might have to try a different firmware a earlier one, what do you guys think?

I mentioned above a couple of peeps had to backup their firmware to the Dec 2002 one to get it to work.

The fact that forwarding port 47 isn't needed....doesn't affect how it works, isn't going to stop it from working, it's just not necessary, unless Linksys did something really odd (which hey, they might have done).

anaheim99 · Post by **anaheim99** » Wed Dec 24, 2003 4:05 pm

I'll try later tonight a different firmware, and I'll post results. Thanks guys.

Post by **YeOldeStonecat** » Thu Dec 25, 2003 8:21 am

See what happens. I've run VPN servers from behind other routers, just not a Linky. Dunno if TWW has tried it either...he has quite a bit more exerience with VPNs than I do.

anaheim99 · Post by **anaheim99** » Sun Dec 28, 2003 4:50 pm

O.k. fellows I tried a different firmware and I only forward port 1723 and it works fine, the problem was the firmware. Thanks fellows.