Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to setup a VPN on my small home network (windows 2003). My home Vista machine is returning me Error 806 and is saying something about enabling the GRE protocol.

I have one nic inside my windows 2003 machine. It has a static ip of

Things I have done

  • I was able to setup the VPN through the Configure Your Server Wizard.
  • I have enabled port 1723 through my router.

When I try to run Windows Firewall for Win2k3 I get a nice message telling me that Windows Firewall cannot run because another program or service is running that might use the network address translation component (Ipnat.sys)

I then went into Routing and Remote Access and from there I am completely lost.

Any help would be greatly appreciated. I was having some bad luck with Google other than finding this great site.

share|improve this question

In addition to TCP port 1723, you're going to need to enable IP protocol 47 to pass through your router/firewall -- this is for GRE, and could be the source of the error.

Can you describe your network further? You have a windows 2003 box w/ one NIC, so it sounds like it's connected directly to your router which is performing nat and has firewalling capability (which is what you've enabled port 1723 to be forwarded through)? Is this about right?

Additionally, is there any security software (i.e., a suite with a personal firewall) installed on the box that may be interfering with the windows firewall?

share|improve this answer
1) That is correct, the windows server is connected to my router 2) Currently no other security software installed, I also disabled my firewall on my vista machine to take out that variable for now. – Ryan Jun 2 '09 at 11:35

There are quite a few things to setup. Here is the site I used as a reference when I setup mine.

share|improve this answer

Not every router supports the GRE protocol. You might want to check first to see if it's something your hardware/current firmware version can support.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.