?????? ??????This article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
Obtain and install the hotfix from "Q292822: Name Resolution and Connectivity Issues on Windows 2000 Domain Controller with Routing and Remote Access and DNS Installed".
The most common issues with VPN on SBS 2000 come from:
Running one of the predefined template wizards that is included in the Routing and Remote Access Management Console.
Following the instructions that are included in the following Microsoft Knowledge Base article:
308208
(http://support.microsoft.com/kb/308208/
)
HOW TO: Install and configure a virtual private network server in Windows 2000
These instructions configure SBS 2000 to act exclusively as a VPN server and only accept VPN connections. Symptoms of using this predefined template include:
Users on the Local Area Network (LAN) cannot browse the Internet.
The SBS 2000 computer may not be able to send or receive SMTP e-mail messages.
Users may not be able to log on to the SBS 2000 domain.
To determine if the Routing and Remote Access VPN wizard was completed on the server:
Start the Routing and Remote Access snap-in.
??????? ????????? ???(???????).
??????? ????IP Routing.
????? ????,???????.
On the right side of the screen, right-click the external network adapter, and then click???.
????? ????,Input Filters,Output Filters, or both.
If this screen is populated, the VPN server was probably selected in the Routing and Remote Access Setup Wizard. If it is apparent that Routing and Remote Access was set up with the VPN wizard, Turn off and then turn on Routing and Remote Access. For information about how to do so, complete step 1 in the "Troubleshooting" section of this article.
A hardware firewall or router is between the external network adapter of the SBS 2000 computer and the Internet. For a VPN client to access the SBS 2000 computer by using a VPN connection, all routers between the remote VPN client and the server must allow traffic to pass through TCP port 1723 (PPTP) and must support protocol type 47. Protocol type 47 is the Generic Routing Encapsulation (GRE) protocol.
You have not completed the steps that are included in the following Microsoft Knowledge Base article:
If a remote access VPN client cannot successfully connect to the SBS 2000 computer:
Turn off and then turn on Routing and Remote Access. This method is listed first because it is the simplest and quickest way to correct mis-configurations in Routing and Remote Access.
????? ????,???when you receive the warning message.
Perform steps 1-12 in the "Configure SBS 2000 to Accept Inbound VPN Connections" section earlier in this article to again turn on and reconfigure Routing and Remote Access. You only have to complete step 13 one time, and you do not have to reapply the hotfix if it has been previously applied.
Try to establish a VPN connection from an internal client to the internal network adapter of the SBS 2000 computer. Turn off the firewall client on the VPN client if it is installed. If this does not resolve the issue, the issue is most likely the server itself, and it is likely that other network problems exist on the server, LAN, or both. Check Event Viewer for errors about TCP/IP. Make sure that all of the appropriate services are started on the SBS 2000 computer. Check Device Manager for problems with the physical network adapters.
Use Pptpsrv.exe and Pptpclnt.exe to verify communication on port 1723 and that GRE47 requests are being passed between the remote VPN client and the SBS 2000 computer. These two tools are included with Windows 2000 Support Tools. You can install these tools on the SBS 2000 computer by running Setup.exe from the Support\Tools folder on the SBS 2000 CD1. After you install the Support Tools, click????????? ????? ????,????????????? ????? ????,Windows 2000 ?????? ??????? ????-????? ????, ?? ???? ???Tools Help. View the "P" section, and then clickPPTP Pingfor information about how to use this utility.
???:: You must stop the Routing and Remote Access service on the SBS 2000 computer so that PPTPSRV can bind to port 1723.
If step 3 does not work, re-configure the physical network by using the following steps. The following steps emulate an incoming VPN connection from a remote VPN client to the SBS 2000 computer. This helps you to determine whether the failure is caused by your local router/firewall, a router on the Internet, or on the SBS 2000 computer.
Connect the external network adapter on the SBS 2000 computer to a simple hub by using a patch cable.
Connect a client computer to the same hub by using a patch cable.
Configure the TCP/IP settings on the client computer to be on the same subnet as the external network adapter of the SBS 2000 computer. For example, if the IP address/subnet mask on external network adapter on the SBS 2000 computer is 157.57.10.8/255.255.0.0, configure the client with an IP address of 157.57.10.9/255.255.0.0.
Turn off the Firewall Client/Winsock Proxy Client on the client computer.
Configure the VPN connection on the client as you would on a "true" external VPN client.
Test the VPN connection.
If it is successful, the problem probably is with something external to the SBS 2000 network. Contact your ISP or hardware firewall vendor for more help.
If it fails, a configuration/hardware issue on the client or server exists that is not addressed in this article. Make note of the error the client receives and any relevant errors in the SBS 2000 Event Viewer log and visit http://support.microsoft.com to search for any known issues.
241252
(http://support.microsoft.com/kb/241252/
)
VPN tunnels - PPTP protocol packet description and use
314076
(http://support.microsoft.com/kb/314076/
)
HOW TO: Configure a connection to a virtual private network (VPN) in Windows XP
For additional information about the Routing and Remote Access wizards that are included with Windows 2000, click the following article number to view the article in the Microsoft Knowledge Base:
256644
(http://support.microsoft.com/kb/256644/
)
Description of Remote Access wizards
Windows Live
Facebook
Twitter
Linkedin
Digg it
Yahoo
Delicious
StumbleUpon
Yammer
Reddit
Technorati
FriendFeed
Email
???? ?????? ????????
????? ?? ???? ????
