Unable to create VPN (native) between two W8.1 Pro

How does one go about creating a VPN between 2 W8.1 Pro machines each on a different WAN and in different location - specifically without using 3rd party software, but only using the built in features for such. I have explored the internet extensively and experimented with all the relevant parts of such (eg. Windows firewall, router firewall, port forwarding, router pass-through etc) exhaustively without any success. Has anyone ever managed to do this?

It SHOULD be easy, given the instructions on the MS website and other sites (eg: client / Server/Firewall), but, even having followed all of the instructions (incl port forwarding, pass-through etc), I still can't get a connection.

Below are details of the configura

May 16th, 2015 8:32am

  There are a couple of points I will comment on.

GRE is not a port (1723 or anything else). GRE is an IP protocol (protocol 47). If you are using PPTP, the packets are encrypted and give a modified GRE header. If any device in the path between client and server cannot handle GRE, no data will cross the link. If you are not using PPTP you need not worry about GRE. 

  Default gateways are meaningless on a VPN connection. VPN is a point to point connection, not a normal network connection, and cannot be routed. What goes in one end comes out the other. Any routing must be done either before it enters the tunnel of after it is decrypted at the other end.

 If you are using PPTP, make sure that the client is set to PPTP, not Automatic.

Free Windows Admin Tool Kit Click here and download it now
May 16th, 2015 10:20pm

Thanks Bill,

I'm aware that GRE is not a port.

The reason I mention default gateways is that on the 'Server' the default gateways displayed by the router and by running 'ipconfig /all' are different, this isn't as a result of a VPN connection, this is what is shown when I sit in front of the actual computer.

I'm surprised, given that native VPN would be such a hugely beneficial feature, that MS haven't provided a comprehensive guide to enabling it. I'm doubtful that anyone on the planet has actually managed a W8.1 to W8.1 native VPN connection.

May 17th, 2015 7:50am

Hi Marodo2712,
How did you configure the VPN server on the Windows 8.1 machine?
We can refer to the following link to configure it.
How to Create a VPN Server on Your Windows Computer Without Installing Any Software
http://www.howtogeek.com/135996/how-to-create-a-vpn-server-on-your-windows-computer-without-installing-any-software/

To isolate the firewall issue,we can try to turn off all the firewall and the third party antivirus software temporarily to have a troubleshoot.

NOTE: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites.

Best regards

Free Windows Admin Tool Kit Click here and download it now
May 18th, 2015 10:31pm

Yes I set up the server just as those instructions suggest. I also tried with the firewalls turned off, both on the router and on the PC (no third party), both at once even! Nothing.

I really have spent the last 6 weeks or so trying every variation of all the settings available, but without ever making a connection.

May 19th, 2015 8:03am

Hi Marodo,

Have you tried to configure the incoming connection (VPN server)from another Windows 8.1 machine to have a check?
Have you tried to ping the VPN server both with the IP address and full name?

According to the error messages,it seems that there is a DNS issue here.
The machine are connected to different router and they are in different network scope,right?

"Yes I set up the server just as those instructions suggest"
Have you configured the router to forward the ip address?
As the link said ,we need to connect to the VPN server with its` public address or its DNS address.Have you noticed this detail?

If there is a DNS issue here,we can try to modify the host file to add the dns record manually to have a check.Here is a link for reference:
How do I modify my hosts file?
http://www.rackspace.com/knowledge_center/article/how-do-i-modify-my-hosts-file

NOTE: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites.

Best r

Free Windows Admin Tool Kit Click here and download it now
May 20th, 2015 1:05am

I've configured both of the w8.1 pro laptops to be both clients and servers - with no connection ever made.

I pinged the local ip and the remote router, both had 4 good packets. (I don't know the 'name' fo the remote Server.

The routers are situated 5 miles apart.

The router has been told that if there is a request for 1723 to send it to the ip of the server machine.

When I 'dial' out I use the public address of the Server's router.

I'm afraid the DNS reference is way over my head.

Below you can see images of the ipcongig /all from both the Client and the Server:

Client

Server

May 20th, 2015 12:44pm

Hi Marod2712,

Have you got any other error messages when you try to make the VPN connection?
According to the error message" 868 error ",it seems that the router is misconfigured.To verify this,we can try to connect the server machine to the network directly without the router to have a check.

"I am using Chrome Remote Desktop to alter setting/test VPN connection on the Server"
Considering you are using a third party software,there may be a compatible issue here.
We can try to use the built-in remote deskptop feature(Run"mstsc") to have a check but we should confirm the VPN connection is fine.

Best r

Free Windows Admin Tool Kit Click here and download it now
May 21st, 2015 5:45am

always either 868 or 800

I'll have to go into the office at the weekend to test the connecting directly to the router theory.

I only use chrome remote desktop because windows rdc keeps timing out. I only use the rdc to change settings on the remote computer, and to try vpn connections from the remote to the local pcs.


May 21st, 2015 9:05am

always either 868 or 800

I'll have to go into the office at the weekend to test the connecting directly to the router theory.

I only use chrome remote desktop because windows rdc keeps timing out. I only use the rdc to change settings on the remote computer, and to try vpn connections from the remote to the local pcs.


  • Edited by Marodo2712 Thursday, May 21, 2015 6:37 PM
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2015 1:04pm

always either 868 or 800

I'll have to go into the office at the weekend to test the connecting directly to the router theory.

I only use chrome remote desktop because windows rdc keeps timing out. I only use the rdc to change settings on the remote computer, and to try vpn connections from the remote to the local pcs.


  • Edited by Marodo2712 Thursday, May 21, 2015 6:37 PM
May 21st, 2015 1:04pm

always either 868 or 800

I'll have to go into the office at the weekend to test the connecting directly to the router theory.

I only use chrome remote desktop because windows rdc keeps timing out. I only use the rdc to change settings on the remote computer, and to try vpn connections from the remote to the local pcs.


  • Edited by Marodo2712 Thursday, May 21, 2015 6:37 PM
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2015 1:04pm

always either 868 or 800

I'll have to go into the office at the weekend to test the connecting directly to the router theory.

I only use chrome remote desktop because windows rdc keeps timing out. I only use the rdc to change settings on the remote computer, and to try vpn connections from the remote to the local pcs.


  • Edited by Marodo2712 Thursday, May 21, 2015 6:37 PM
May 21st, 2015 1:04pm

ANYTHING??????
Free Windows Admin Tool Kit Click here and download it now
May 27th, 2015 8:37am

Hi Marodo2712,

For the error 868, ", it seems that the router is misconfigured. For the error 800, it is also related to the router.
Here is a link for reference(Though it is about Windows XP, the information should be useful as a reference):
Error Message: VPN Connection Error 800: Unable to Establish Connection
https://support.microsoft.com/en-us/kb/319108

Have you tried to create the VPN without the Router to have a check?

Best r

May 27th, 2015 10:29pm

This is NOT AN ANSWER, it's a suggestion that didn't work.
Free Windows Admin Tool Kit Click here and download it now
June 5th, 2015 6:22am

Hi Marodo,

Do you mean the issue persists when we create the VPN without connecting the router?

We also can make a test with a third machine to have a troubleshoot whether this issue only occurred with the specific two machines.

Best r

June 7th, 2015 10:33pm

Yes, the problem persists.

I have removed the ethernet cable from the back of the remote 'Server' PC, then connected via an iPhone personal hotspot, got the external IP and tried with that - nothing.

I've also tried connecting from the remote 'Server' to my own PC, which only connects via a Wi-Fi signal from the router with ports open, pass-through allowed, and firewalls edited - nothing.

I've also tried connecting the 'Server' to my PC with my PC connected to the internet via 'Network Sharing' on my Lumia 625 - nothing.

I even bought a new laptop, just in case it was an issue with an upgrade from W7 Pro to W8.1 Pro.

I would like to try the third machine option if I could.

Thanks


  • Edited by Marodo 20 hours 39 minutes ago
Free Windows Admin Tool Kit Click here and download it now
June 8th, 2015 6:43am

Yes, the problem persists.

I have removed the ethernet cable from the back of the remote 'Server' PC, then connected via an iPhone personal hotspot, got the external IP and tried with that - nothing.

I've also tried connecting from the remote 'Server' to my own PC, which only connects via a Wi-Fi signal from the router with ports open, pass-through allowed, and firewalls edited - nothing.

I've also tried connecting the 'Server' to my PC with my PC connected to the internet via 'Network Sharing' on my Lumia 625 - nothing.

I even bought a new laptop, just in case it was an issue with an upgrade from W7 Pro to W8.1 Pro.

I would like to try the third machine option if I could.

Thanks


  • Edited by Marodo Monday, June 08, 2015 10:43 AM
June 8th, 2015 10:42am

Yes, the problem persists.

I have removed the ethernet cable from the back of the remote 'Server' PC, then connected via an iPhone personal hotspot, got the external IP and tried with that - nothing.

I've also tried connecting from the remote 'Server' to my own PC, which only connects via a Wi-Fi signal from the router with ports open, pass-through allowed, and firewalls edited - nothing.

I've also tried connecting the 'Server' to my PC with my PC connected to the internet via 'Network Sharing' on my Lumia 625 - nothing.

I even bought a new laptop, just in case it was an issue with an upgrade from W7 Pro to W8.1 Pro.

I would like to try the third machine option if I could.

Thanks


  • Edited by Marodo Monday, June 08, 2015 10:43 AM
Free Windows Admin Tool Kit Click here and download it now
June 8th, 2015 10:42am

Hi Marodo,

How about the issue? What did it happen when we work with the third machine?

Best regards

June 17th, 2015 10:16pm

No third machine was offered.
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2015 1:52pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics