[Ebmm]

Hello all,

I'm trying to config SSTP VPN on 2012R2. I believe my self-signed certs are in order, pass thru on router, forwarding, etc is all good (best I can tell anyway). The client is Win 10 Ent. I can connect to the VPN at the house, on the same network w/o issue. Once I go to the coffee shop, I get the error "A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond".

I am at a loss. Can someone please advise me on where to look next? I've been over and over the client and RRAS settings and can find nothing wrong.

Thx in advance
Ron

 

[MitchConner]

Sounds like a firewall issue to me mate. What ports have you forwarded on your router?

 

[Ebmm]

Ports forwarded are also for L2TP but are 1701, 500, 4500 and 443, but 443 has not made a difference, forwarded or not. I've also, temporally, disabled the firewalls on both server and client w/ no change.

I'm wondering, is there a specific, or ideal IP address the external NIC should have?

 

[MitchConner]

As long as 443 is forwarded to the right private address on your LAN, then you should be good.

Are you trying to connect using the domain name in the windows client? If so, you'll need to make sure that your DNS entry points to the public IP address of your router.

 

[Ebmm]

Just Public address issued by TW, forwarded to the server's external NIC IP.

 

[MitchConner]

Are you able to test from anywhere other than the coffee shop? If they're doing any sort of proxying, it's not going to work.

 

[Ebmm]

I thought about that but you'd think a Starbucks, in a Marriott, on the Marriott's WiFi, would allow any form of VPN, but I'm going to try another for kicks.

 

[MitchConner]

You'd like to think so Sometimes however, if there is a proxy in the path, it will break the chain of trust.

If you want to share your public IP and DNS name with me (you can do this in a PM to preserve your privacy), I can test it for you.