[vpn] Win2K and VPN

[David B. Beegle]

I'd like to scratch that last thing I said.  I guess I am able to browse
through some computers but am not able to browse through some of those that
I normally do from work.  Any ideas why I would be able to browse through
some and not others?

David

-----Original Message-----
From: David B. Beegle [mailto:beegled at home.com]
Sent: Wednesday, August 22, 2001 10:53 PM
To: 'kent at dalliesin.com'; 'vpn at securityfocus.com'
Subject: RE: [vpn] Win2K and VPN

Before replying to this message, I read another message submitted by you
Kent, another message submitted by Byron Kennedy and another from Chris
Lynch.  I just want to than you all so much for the help.  You are
wonderful.  It was the encryption thingy settings that were the problem.  I
can connect to the network now!!!!  After spending what has seemed like
forever trying to work through this, I am now able to connect.  Yeah!!!!
Thank you guys!!!!  To answer another question of yours Kent, yes I have a
firewall installed on my computer that a friend recommended to me, Zone
Alarm.  I guess now I have another question, I am unable to do anything like
browse through computers in the network neighborhood when I connect.  Is
this because of this firewall I have put on my computer?

David

-----Original Message-----
From: Kent Dallas [mailto:kent at dalliesin.com]
Sent: Wednesday, August 22, 2001 10:56 AM
To: beegled at home.com; vpn at securityfocus.com
Subject: RE: [vpn] Win2K and VPN

David,

I suspect Byron's point was that, without additional information, it is
impossible to give you decent pointers.

The couple of pieces of new information in your latest email tells us:
1) Other co-workers are successfully using the "VPN solution" (that's good)
2) The VPN solution is based on the capabilities built into MS Win2K
(client) and either WinNT or Win2K (server), and not a third party VPN
(which limits it to MS PPTP, L2TP, or MS IPSec/L2TP).

Are you getting "Error 691: Access was denied because the username and/or
password was invalid on the domain"?  If so, you may be very close, and the
only problem may be the format of your username (or fat fingering the
password, caps lock off - right?).  At work, you probably have a domain
logon screen, that includes your username, your password, and your NT
domain.  On your home machine, and the VPN connection, it only asks for your
username and  password, right?  Are you, somehow, providing the NT domain?

Besides this list, three other options available to you:
1) Review your configuration, especially username formats and also
connection properties, with those of co-workers who have successful setups,
match everything exactly, and see if you get further (or at least get a
different error message).  This is probably your best option.  Or,
2) Research the problem on Microsoft's knowledge base
3) Befriend one of your IT folks who are strong in MS and beg for help

Even without more information, here are a couple of tweaks you may try to
see if they will work (I have not previously used MS VPN on my Win2K box,
but I was just successful configuring it with these changes - which may or
may not work in your environment).

In the VPN Connection Properties, choose Security, then select Advanced
(Custom Settings).  Then select Optional Encryption from the top drop down
list, and select the checkboxes for PAP, CHAP, and both MS CHAP options (do
not check the "automatically use my Windows logon name...")

If these tweaks at least allow you to create the VPN connection
successfully, you may still have some domain logon and name service
challenges, but you will at least be closer.

Good Luck,
Kent Dallas
Dalliesin, Inc.

-----Original Message-----
From: David B. Beegle [mailto:beegled at home.com]
Sent: Tuesday, August 21, 2001 9:34 PM
To: 'Byron Kennedy'; vpn at securityfocus.com
Subject: RE: [vpn] Win2K and VPN


>From what I understand, it shouldn't cost any money at all.  I have a cable
modem and I should be able to just use a "Network and Dial-up Connection" to
connect to my company's network as long as I know the IP address, right?
The people I do work with that have it working don't have any special
hardware of software.  My IT department told me that I could just login
using the same login and password that I use at work.  They won't help set
it up because they do not own the computer that I use at home.  All I did
was run the "Make New Connection" wizard and I assumed that would do it,
which of course it did not.  Was I wrong?

David

-----Original Message-----
From: Byron Kennedy [mailto:byron at markettools.com]
Sent: Tuesday, August 21, 2001 4:00 PM
To: 'beegled at home.com'; vpn at securityfocus.com
Subject: RE: [vpn] Win2K and VPN

Depending on your environment, your question may very well require a
blackboard and some budget. It's not really like plugging in a mouse.
otherwise, why wouldn't your IT department just setup the VPN for you?

Byron

-----Original Message-----
From: David B. Beegle [mailto:beegled at home.com]
Sent: Saturday, August 18, 2001 1:47 PM
To: vpn at securityfocus.com
Subject: [vpn] Win2K and VPN


Hello,

I want to set-up a VPN connection from my home computer to my company's
network.  I am using Win2K Pro and my IT department has told me that my
account does allow for VPN connections.  My problem is that I don't know
much about computers except how to use Microsoft Office really, which is
what I do most of my work in; I'm a business analyst.  So, my quandary is
that I have run the wizard in Windows 2000 and walked through it and input
all of the information it asks for but the connection still won't work.  I
can't even connect.  It acts like it is going to or is trying to connect and
then tells me that my login credentials have failed.  I am using the same
login and password that I use when I'm at work, my IT department did at
least tell me that that is what I should be using.  I always read on one
site recently that my Windows 2000 account that I have set-up for myself on
my computer at home, needs to use the same login and password as my account
on the network at work for the VPN connection to work so I did change it to
match.  I know I am not giving much information here but I am not sure what
is pertinent and what isn't.  Any ideas on what I should maybe look at?  Any
help is greatly appreciated.  Thank you.

David Beegle


VPN is sponsored by SecurityFocus.com


VPN is sponsored by SecurityFocus.com


VPN is sponsored by SecurityFocus.com