Ports needed for VPN (or how to remove my server from DMZ)

[HenrikDK]

I am setting up a VPN. (And I am a newbie at networking - dangerous combination!) I am using a MediaOne cable modem, a Linksys router and a D-Link swithch. I use the Linksys router for DHCP Server. My W2K server has a fixed IP address

I have PPTP pass-through enabled, but block WAN request in general. If I put my server in the DMZ, I can get connected, no problem.

BUT I was hoping not to expose the whole server. I eventually found out that PPTP needs port number 1723. I tried to forward that port to my server, but as soon as I take the server off the DMZ, I don't get an answer when I dial in. Do I need to forward other ports? Other settings I need to change?

I meant to try disable 'Block WAN requests'. I am really confused exactly what that does...

 

[Vegito]

You also need GRE, may need something around 500s.. i'll look for the VPN ports...

 

[willhart]

You will also need to open up IP port 47 which is also known as GRE if your using something like Firewall-1. When you go into Windows advanded security for TCP/IP you can set filters to only let certain ports in. TCP UPD and IP.

Let me know if that helps.

(P.S PPTP will not go through a nat service at all it will need it's own public IP address)

 

[Damaged]

GRE is protocol 47, not port 47. Port 1723 is what needs to be opened up for VPN.

 

[Damaged]

Quick followup here: the UDP port 500 is for IPSEC and if you're running that you'll also need to open up that port. IPSEC runs over IP protocol 50.

 

[HenrikDK]

Thanks fory your help. Will try it out!!!

 

[HenrikDK]

Read the posts a little close, and I am back to square one. I have tried to forward port 1723, biut that didn't work. Seems like that is the only port? (I am not using IPSec)

Would I have to enable Wan requests if I am using forwarding? Any other setting?

 

[Shuxclams]

You need 47 (GRE if that is available as a choice), 50, 1723 and 500 forwarded to your private IP.





SHUX

 

[itisi]

Everyone is correct about the TCP port 1723 and GRE 47, but I also had to open UDP port 1701 on my router to forward VPN requests to the server. It works, so I am satisfied with keeping that way.

Good luck with the VPN. It was a frustrating experience for me. I do have a working VPN now, and I am happy with the results.