NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

tompar's avatar
tompar
Aspirant
Sep 02, 2016
Solved

FVS336Gv3 VPN GRE Problem

Hi,

 

We upgraded from our old Netgear Prosafe FVS 338 to this years "NETGEAR ProSafe™ Gigabit Dual WAN SSL VPN Firewall FVS336Gv3".

Our problem is that the VPN dosent work from "outside" our network anymore.

 

All the VPN settings are the same as the old prosafe and all the security settings are the same.

The VPN settings cant be the problem since it works if we are inside the same network as the Prosafe.

 

When we try to connect from outside our network, it says its a GRE problem. Still, it has the same security settings as the old Prosafe (PPTP is accepted and forwarded correctly).

 

What could be the difference between the two products? 

 

My Settings right now:

Attack checks: VPN Pass through checked. Responds to Ping Checked, everything else unchecked.

PPTP is forwarded correctly. If i disable this service, the VPN wont work from inside our network, and i've portscanned the port so i know its working and accesible from outside.

My firmware is the newest avalible for europe.

 

Please help, or I have to throw this firewall in the trashcan and revert back to the old one.

 

Regards,

Thomas

 

 

  • Hi tompar,

     

    I'm glad to know that L2TP works fine.  Based from your answers, it seems that PPTP should be working.  With regard to this, if ever you still want to use PPTP, I suggest you to open an online case with NETGEAR Support for further assistance for the FVS336Gv3 to be checked.

     

     

    Regards,

     

    DaneA

    NETGEAR Community Team

6 Replies

    • tompar's avatar
      tompar
      Aspirant

      Hi,

       

      That might work but we do use our Windows Server 2008 to handle the user logins using AD domain.

       

      As I said, it works fine within the network, and the port is forwarded correctly to the windows server computer (PPTP forwards to 192.168.0.100)

       

      But when we try from outside our network, it says that GRE is a problem.

       

      This works fine on our old router.

       

      Regards,

       

      Thomas

      • DaneA's avatar
        DaneA
        NETGEAR Employee Retired

        Hi tompar,

         

        Since the problem occurs from “outside” the network, kindly check the Internet IP address used in the client side PPTP configuration if correct since the FVS336Gv3 was installed. Do you have a static Internet IP Address or are you using a DDNS type service?  It is possible that the settings no longer matches the old FVS338 and could prevent the connection from “outside”.

         

        You could enable logging temporarily on the WAN inbound to see if the PPTP client is actually hitting the firewall when initiating the PPTP VPN.   This would also help to know if the Internet IP address is set correctly or not.

         

        You also mentioned that when it works from inside the network the (PPTP forwards to 192.168.0.100), did you set the correct inbound firewall rule to pass traffic coming from the WAN onto the Server at 192.168.0.100? – again enabling and checking the inbound firewall rule logs can help determine if the traffic is hitting the firewall and being forwarded to the correct IP address.

         

        What is the exact error message when the PPTP client fails to connect?  It would be best that you post a screenshot or image of it.

         

         

        Regards,

         

         

        DaneA

        NETGEAR Community Team

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More