I have a Win2K3 RRAS server behind a 2801 router. The server is statically NATted and GRE and port 1723 are allowed via the external ACL.
I thought this was just a Windows error, but the error I get when clients try to connect led me to post this here.
The connection begins, then times out with the following error:
Event Type: Warning
Event Source: Rasman
Event Category: None
Event ID: 20209
Date: 6/6/2008
Time: 1:33:36 PM
User: N/A
Computer: SERVER
Description:
A connection between the VPN server and the VPN client 66.210.xxx.xxx has been established, but the VPN connection cannot be completed. The most common cause for this is that a firewall or router between the VPN server and the VPN client is not configured to allow Generic Routing Encapsulation (GRE) packets (protocol 47). Verify that the firewalls and routers between your VPN server and the Internet allow GRE packets. Make sure the firewalls and routers on the user's network are also configured to allow GRE packets.
This implies that the problem is with GRE. However, GRE is permitted any any. What gives?
