Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a huge problem regarding a vpn set up in windows 2008 which sits behind a fortigate 50b firewall. It's been 1 week and I can't figure out what is going on...

Windows 2K8 enterprise is configured has AD, DNS and DHCP server. Recently, my boss told me I had to configure a vpn on the server in order to access files to another computer over the internet. So I did the configuration by going to the roles and adding RRAS as a new role. I configured it as PPTP (I know it's not secure enough, but this is just my first attempt to make it workable, I'll make it more secure later on when this connection works fine) with MS-CHAPv2. On Remote Access Logging and Policies, I went and created a new network policy with "grant access" and on conditions, I gave permissions to a "vpn group" with PPTP and L2TP.

Now I'm not an expert on Fortigate but i had some help from technical support on how to open ports and create virtual IPS in order for the firewall to have full communications with the server. So what I told them to do is to open port 1723 for VPN and ip port 47 for GRE.

It didn't work. I have each and every time an 807 error stating there's no communication between the server and the computer to which I'm trying to access the vpn.

So I went to the firewall as my first guess to resolve this problem. Technical support created a new virtual ip which maps the local server and then they created a new policy from the wan1(internet connection) to this new virtual ip. Still, no result.

I called them, they told me the traffic is going through but there's no communication with the server. That's where it gets confusing...

I recreated the vpn as a vpn server with NAT with the above configuration (PPTP, MS-CHAPv2 and onto Network policies). This time, I went and opened ports on the firewall from the server but still no result. I disabled windows firewall but still, no result. Funny thing is, I can ping the firewall, its default gateway and the computer where it sits.

From my client computer, I can ping the firewall. But there's no link to the vpn.

What am I doing wrong?

share|improve this question
Sorry it's not actually an answer, but I would try running wireshark on your server to see if anything is actually getting through the firewall. –  Robin Gill Jan 20 '12 at 21:38
Can the firewall ping the server? –  Coding Gorilla Jan 20 '12 at 21:45
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.