Windows Server - VPN connection via Satelite ISP

Asked By Sierra Nevad on 22-Feb-07 02:41 PM
Wehave sbs2003 setup with 2 nic's. We are able to connect via VPN from the US
and from the UK offices, but when  the CEO goes home to mexico and tries to
connect via the VPN using her Satelite ISP she receives a error 721 and on
the server event log it shows and event with id 20209. Our CEO can connect
from the UK and US fine. The Satelite ISP is telling me that they are not
blocking any protocols. Can anyone provide me with a little help on this, i
think it is the Satelite ISP, any info would be greatly appreciated.

Event ID 20209
been established, but the VPN connection cannot be completed. The most common
cause for this is that a firewall or router between the VPN server and the
VPN client is not configured to allow Generic Routing Encapsulation (GRE)
packets (protocol 47). Verify that the firewalls and routers between your VPN
server and the Internet allow GRE packets. Make sure the firewalls and
routers on the user's network are also configured to allow GRE packets. If
the problem persists, have the user contact the Internet service provider
(ISP) to determine whether the ISP might be blocking GRE packets."

Merv Porter [SBS-MVP] replied on 22-Feb-07 06:34 PM
Hmmm. (no expereince with a satellite connection, but...)

That IP is blacklisted by at least one list (if that matters)

Also, this thread seems to indicate that VPN via satellite may need a static
IP because of NAT for dynamic IPs...,14802210?hilite=vpn+error+721

Merv  Porter   [SBS-MVP]
Jim Behning SBS MVP replied on 22-Feb-07 07:25 PM
I had a satelite provider tell the customer they had to upgrade from
the consumer to the pro version for vpn to work. Eventually dsl
arrived in that neighborhood. If others can vpn then it has to be her

On Thu, 22 Feb 2007 11:41:18 -0800, Sierra Nevada <Sierra
SierraNevad replied on 22-Feb-07 07:26 PM
Thanks Merv, Will try the static ip route and see if that works.
swb_mct replied on 23-Feb-07 12:35 AM
It could be a latency issue. The VPN may not tolerate a .6s to .9s .80s
round trip which is common for Satellite.    Satellite is good for web
surfing but not good for services that depend on a fast round trip of
communication.  For example terminal services/Citrix with a Satellite
service is essentially unusable.