Cannot connect to Server 2019 VPN through Verizon hotspot.

Robert Pahls 1 Reputation point
2021-02-04T14:26:44.223+00:00

Hi.

I have a new Server2019 server which I have installed Remote Access / VPN on. Everything works correctly through my home network (CBTS) and through other services (Spectrum, etc).

But I have clients that need to connect to the VPN through their Verizon hotspots. When I switch my PC to my Verizon Hotspot, I get the following error trying to connect:

The VPN connection between your computer and the VPN server could not be completed. The most common cause for this failure is that at least one Internet device (for example, a firewall or a router) between your computer and the VPN server is not configured to allow Generic Routing Encapsulation (GRE) protocol packets. If the problem persists, contact your network administrator or Internet Service Provider.

I have been trying to work with Verizon 2nd level support, but have had no response.

IS there something I can check on my end to try and troubleshoot this issue?

Thanks in advance

Bob Pahls

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,457 questions
Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,241 questions
Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
514 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.1K Reputation points MVP
    2021-02-04T15:12:49.83+00:00

    The Generic Route Encapsulation (GRE) protocol is used in conjunction with PPTP. Data or payload that is going to pass through the tunnel is given a Point-to-Point Protocol (PPP) header and then placed inside a GRE packet. The GRE packet carries the data between the two tunnel endpoints. After the GRE packet has arrived at the final destination (the endpoint of the tunnel), it is discarded and the encapsulated packet is then transmitted to its final destination.

    Make sure that TCP port 1723 and GRE (IP protocol 47) are open on the end points, likely your NAT router device. The device manual should have the specific details.

    --please don't forget to Accept as answer if the reply is helpful--

  2. Gloria Gu 3,891 Reputation points
    2021-02-05T07:58:25.117+00:00

    Hi,

    Thank you for posting in Q&A!

    1.May I ask is your VPN server behind NAT? In that case, you might need port forwarding:
    1033906

    2.If your firewall didn’t whitelist your VPN when you created the secure tunnel, it might be the reason why you keep seeing VPN error 806 on Windows 10. Please try to Add an exception to the firewall and antivirus.

    64419-23.png

    3.Try to Allow PPTP passthrough on your router:
    Access the admin page of your router and look for PPTP and/or PPTP passthrough settings.
    Enable these options for incoming and outgoing settings to ensure that your home router doesn’t block VPN traffic when using PPTP.

    Hope you have a nice day : )
    Gloria

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
    https://learn.microsoft.com/en-us/answers/articles/67444/email-notifications.html

    0 comments