VPN - IPX error 733 when connecting from Windows XP

Question

VPN - IPX error 733 when connecting from Windows XP

I have a 10.4.8 (Intel) OS X Server at our office. Our Mac users can VPN in with no problems, they get a valid IP from the vpn lease pool, can remotely control desktop machines, use files, etc. However, when trying to connect from XP, my user is getting an Error 733 referring to IPX. Anyone see this or have input for me? It's the boss who can't get in, so you can imagine I need to pay attention to this one! 😉

2.66 Dual Xeon Mac Pro, Mac OS X (10.4.8)

Posted on Oct 19, 2006 6:27 PM

Reply

Answer 1

Oct 19, 2006 11:24 PM in response to Bill Reynolds3

What type VPN: PPTP or L2TP?

Server/client has public or private IP?

If server has private IP (behind NAT-router) forget L2TP and Windows XP compatibility. You need PPTP for that.

Any routers inbetween?

Reply

Answer 2

Oct 20, 2006 9:58 PM in response to Leif Carlsson

PPTP only. Basic name/password challenge.

Server has private IP behind Netgear Prosafe Firewall appliance. Server is the DMZ. The Netgear receives our static IP from our T1 gateway, and performs DHCP and NAT for us. The OS X Server has a static private IP, and serves mail, ftp and vpn. (web to follow)

Clients can VPN in and receive a private IP within the specified range. I allow 40 bit and 128 bit encryption.

OSX Server: 192.168.200.250
Starting and ending IP addresses for VPN: 192.168.200.180 - 190

under Client Information:
DNS Servers: (two public DNS local to us from an ISP)
Search domains: (empty)
Network routing definition: 192.168.200.0 / 255.255.255.0 / private

From my PowerBook (10.4.8 client), I connect just fine, can use remote desktop connector to control XP boxes at the office, and access our files, printers, etc.

Reply

Answer 3

Oct 21, 2006 12:56 AM in response to Bill Reynolds3

What about the boss's home network/router (VPN passthrough is enabled?) and/or (personal) firewall (XP) sw?

Why allow 40 bit PPTP?

You could use IPSec VPN client sw boss PC <-> Netgear...

As you use the DMZ to server IP you should run/configure the OS X firewall (or just forward necessary ports protocols instead).

Reply

Answer 4

Oct 22, 2006 12:45 AM in response to Bill Reynolds3

Also, he's not trying to do IPX (Novell Netware traffic) across the VPN is he?

Reply

Answer 5

Oct 27, 2006 1:17 PM in response to Leif Carlsson

To my knowledge his home network is not causing an issue. It works fine from his MacBook Pro at home, running OS X 10.4.8 client, but not from his eXPee box, which used to work fine when we had a SBS2003. No we're not doing any Novell protocol traffic. If I dont need to offer 40-bit, I'll turn that off.

Reply

Answer 6

Nov 11, 2006 6:08 PM in response to Bill Reynolds3

The user had IPX/SPX enabled on his XP machine in the network stack. Once I had him take that out, the VPN connection works fine.

Reply