Recommended Tests

Hello all,

I've been searching through your forums and have learned a great deal about DirecWay (now Hughes).

However I have one problem that I've yet to find a solution for.  I'm lucky enough to live in a big city myself and work in an office with a nice fast T1 connection.  But one of our employees had no choice but DirecWay on his property in rural Alabama.

He's already been screwed over by the fact that his web email (which runs over SSL) is dirt slow because of the fact that the accelerator doesn't work on encrypted connections.

Now were running into a problem with the VPN.  When he attempts to connect it hangs and then fails.

On the server I got the following message:

A connection between the VPN server and the VPN client 72.169.51.157 has been established, but the VPN connection cannot be completed. The most common cause for this is that a firewall or router between the VPN server and the VPN client is not configured to allow Generic Routing Encapsulation (GRE) packets (protocol 47). Verify that the firewalls and routers between your VPN server and the Internet allow GRE packets. Make sure the firewalls and routers on the user's network are also configured to allow GRE packets. If the problem persists, have the user contact the Internet service provider (ISP) to determine whether the ISP might be blocking GRE packets.

He doesn't have a router installed separately from the VPN and he's connected to the VPN without issue over dial up to this point so it's not something on his machine.

Anyone know if it's the DW7000 blocking the packets or DirecWay somewhere along the way?

Anyone ever had this problem or maybe a solution or suggestion?

Thanks All!

Brandon
Toronto Canada.

Thanks for the info.

The type of VPN is simply PPTP using the built in windows client on XP Pro connecting to a server running Windows SBS 2003.

As far as the static IP goes most ISP's don't give out static IP's permanently unless you pay for the business level service as you do with DirecWay.  I have DSL at home and my IP on the router changes every 24 hours or so and this has never caused an issue with the VPN though.  Does the IP address on DirecWay change more frequently (every couple minutes?) than a standard DSL or Cable connection?

If the professional version of DirecWay also opens all the ports then isn't that the more likely reason that switching to Professional allows people's VPN connections to begin working?

Thanks for all the help!

Brandon, I run dw4000 and use Cisco software vpn client on my laptop and have no problems as long as the MTU is set at 1300. I'd really like to know if you get this resolved because I'm considering upgrading from the 4000 to the 7000 and need my sw vpn to continue working.

Can you have your client/customer set the MTU to 1300 and then 1200 and see if that works and let us know.

It's not uncommon to have to drop the MTU for vpn to work, I've been around this block with vpn a lot. When I was running 1500 MTU on the client, I could connect to the VPN concentrator but Outlook and other things didn't work.

Also make sure that windows firewall, Advanced tab, that the clients enet nic isn't selected, that is of course if they are running another firewall and I assume so since this is a corporate connection.

So let us know what happens please.