Help with VPN Install

Hi All,

I ran the configure your serer wizard to set up VPN on my
2003 Server.The wizard completed successfully, but I'm
kind of stuck now;

Q: The wizard stated that i needed 2 nic's, one for local
network connection and the other for the internet. Should
the one for the internet be connected in front of my
firewall appliance (sonicwall), directly to one of the
ethernet output jacks on my DSL router or should i
connect it behind my firewall, to one of the 24 ports
on my switch?

Q: After that, how do i set up remote clients to use the
VPN connection?

Q: Where, besides Windows help, can i go for thourough
information on server and client installation?

TIA,
Damon

If you are behind a router/firewall, you do not need two NICs in the
server. But if you do want to use two NICs in the server, you will need to
reconfigure your network.

If the server is directly connected to the Internet, you have the
standard two NIC setup. One NIC is your public interface, the other is in
your private LAN. If you are behind a router/firewall, you can use your
firewall as the public interface. You use one NIC in the server, configure
it as a remote access server, then access it from the Internet by using port
forwarding on the firewall. (The remote client connects to the firewall, but
the VPN connection is extended to the server on the LAN by port forwarding).

To use two NICs in this situation, you have to configure your netwrok so
that the server is the default gateway of your LAN, and only the server has
a connection to the router. The router/server connection and the LAN must be
in different IP subnets.

"damonj" <(E-Mail Removed)> wrote in message
news:c9f901c48a32$6b268160$(E-Mail Removed)...
> Hi All,
>
> I ran the configure your serer wizard to set up VPN on my
> 2003 Server.The wizard completed successfully, but I'm
> kind of stuck now;
>
> Q: The wizard stated that i needed 2 nic's, one for local
> network connection and the other for the internet. Should
> the one for the internet be connected in front of my
> firewall appliance (sonicwall), directly to one of the
> ethernet output jacks on my DSL router or should i
> connect it behind my firewall, to one of the 24 ports
> on my switch?
>
> Q: After that, how do i set up remote clients to use the
> VPN connection?
>
> Q: Where, besides Windows help, can i go for thourough
> information on server and client installation?
>
> TIA,
> Damon

Thanks Bill!
I think I'll go with the single nic route.
Damon
>-----Original Message-----
> If you are behind a router/firewall, you do not need
two NICs in the
>server. But if you do want to use two NICs in the
server, you will need to
>reconfigure your network.
>
> If the server is directly connected to the Internet,
you have the
>standard two NIC setup. One NIC is your public
interface, the other is in
>your private LAN. If you are behind a router/firewall,
you can use your
>firewall as the public interface. You use one NIC in the
server, configure
>it as a remote access server, then access it from the
Internet by using port
>forwarding on the firewall. (The remote client connects
to the firewall, but
>the VPN connection is extended to the server on the LAN
by port forwarding).
>
> To use two NICs in this situation, you have to
configure your netwrok so
>that the server is the default gateway of your LAN, and
only the server has
>a connection to the router. The router/server connection
and the LAN must be
>in different IP subnets.
>
>"damonj" <(E-Mail Removed)> wrote in
message
>news:c9f901c48a32$6b268160$(E-Mail Removed)...
>> Hi All,
>>
>> I ran the configure your serer wizard to set up VPN on
my
>> 2003 Server.The wizard completed successfully, but I'm
>> kind of stuck now;
>>
>> Q: The wizard stated that i needed 2 nic's, one for
local
>> network connection and the other for the internet.
Should
>> the one for the internet be connected in front of my
>> firewall appliance (sonicwall), directly to one of the
>> ethernet output jacks on my DSL router or should i
>> connect it behind my firewall, to one of the 24 ports
>> on my switch?
>>
>> Q: After that, how do i set up remote clients to use
the
>> VPN connection?
>>
>> Q: Where, besides Windows help, can i go for thourough
>> information on server and client installation?
>>
>> TIA,
>> Damon
>
>
>.
>

OK, now my question is what port (service) should i open
up?
Is it port 500, KEY EXCHANGE (IKE)?
THANKS.

>-----Original Message-----
> If you are behind a router/firewall, you do not need
two NICs in the
>server. But if you do want to use two NICs in the
server, you will need to
>reconfigure your network.
>
> If the server is directly connected to the Internet,
you have the
>standard two NIC setup. One NIC is your public
interface, the other is in
>your private LAN. If you are behind a router/firewall,
you can use your
>firewall as the public interface. You use one NIC in the
server, configure
>it as a remote access server, then access it from the
Internet by using port
>forwarding on the firewall. (The remote client connects
to the firewall, but
>the VPN connection is extended to the server on the LAN
by port forwarding).
>
> To use two NICs in this situation, you have to
configure your netwrok so
>that the server is the default gateway of your LAN, and
only the server has
>a connection to the router. The router/server connection
and the LAN must be
>in different IP subnets.
>
>"damonj" <(E-Mail Removed)> wrote in
message
>news:c9f901c48a32$6b268160$(E-Mail Removed)...
>> Hi All,
>>
>> I ran the configure your serer wizard to set up VPN on
my
>> 2003 Server.The wizard completed successfully, but I'm
>> kind of stuck now;
>>
>> Q: The wizard stated that i needed 2 nic's, one for
local
>> network connection and the other for the internet.
Should
>> the one for the internet be connected in front of my
>> firewall appliance (sonicwall), directly to one of the
>> ethernet output jacks on my DSL router or should i
>> connect it behind my firewall, to one of the 24 ports
>> on my switch?
>>
>> Q: After that, how do i set up remote clients to use
the
>> VPN connection?
>>
>> Q: Where, besides Windows help, can i go for thourough
>> information on server and client installation?
>>
>> TIA,
>> Damon
>
>
>.
>

PPTP uses tcp port 1723. You also must allow IP protocol 47 (GRE) in
both directions for the encapsulated VPN data packets.

L2TP uses udp port 1701 . Because of IPSec you also need udp port 500
for IKE and you need to allow IP protocol 50 (ESP) for the encrypted data.

"damon" <(E-Mail Removed)> wrote in message
news:d4c401c48ac5$b7b30650$(E-Mail Removed)...
> OK, now my question is what port (service) should i open
> up?
> Is it port 500, KEY EXCHANGE (IKE)?
> THANKS.
>
> >-----Original Message-----
> > If you are behind a router/firewall, you do not need
> two NICs in the
> >server. But if you do want to use two NICs in the
> server, you will need to
> >reconfigure your network.
> >
> > If the server is directly connected to the Internet,
> you have the
> >standard two NIC setup. One NIC is your public
> interface, the other is in
> >your private LAN. If you are behind a router/firewall,
> you can use your
> >firewall as the public interface. You use one NIC in the
> server, configure
> >it as a remote access server, then access it from the
> Internet by using port
> >forwarding on the firewall. (The remote client connects
> to the firewall, but
> >the VPN connection is extended to the server on the LAN
> by port forwarding).
> >
> > To use two NICs in this situation, you have to
> configure your netwrok so
> >that the server is the default gateway of your LAN, and
> only the server has
> >a connection to the router. The router/server connection
> and the LAN must be
> >in different IP subnets.
> >
> >"damonj" <(E-Mail Removed)> wrote in
> message
> >news:c9f901c48a32$6b268160$(E-Mail Removed)...
> >> Hi All,
> >>
> >> I ran the configure your serer wizard to set up VPN on
> my
> >> 2003 Server.The wizard completed successfully, but I'm
> >> kind of stuck now;
> >>
> >> Q: The wizard stated that i needed 2 nic's, one for
> local
> >> network connection and the other for the internet.
> Should
> >> the one for the internet be connected in front of my
> >> firewall appliance (sonicwall), directly to one of the
> >> ethernet output jacks on my DSL router or should i
> >> connect it behind my firewall, to one of the 24 ports
> >> on my switch?
> >>
> >> Q: After that, how do i set up remote clients to use
> the
> >> VPN connection?
> >>
> >> Q: Where, besides Windows help, can i go for thourough
> >> information on server and client installation?
> >>
> >> TIA,
> >> Damon
> >
> >
> >.
> >

Thanks Bill. Will give it a try.
Damon
>-----Original Message-----
> PPTP uses tcp port 1723. You also must allow IP
protocol 47 (GRE) in
>both directions for the encapsulated VPN data packets.
>
> L2TP uses udp port 1701 . Because of IPSec you also
need udp port 500
>for IKE and you need to allow IP protocol 50 (ESP) for
the encrypted data.
>
>"damon" <(E-Mail Removed)> wrote in
message
>news:d4c401c48ac5$b7b30650$(E-Mail Removed)...
>> OK, now my question is what port (service) should i
open
>> up?
>> Is it port 500, KEY EXCHANGE (IKE)?
>> THANKS.
>>
>> >-----Original Message-----
>> > If you are behind a router/firewall, you do not
need
>> two NICs in the
>> >server. But if you do want to use two NICs in the
>> server, you will need to
>> >reconfigure your network.
>> >
>> > If the server is directly connected to the
Internet,
>> you have the
>> >standard two NIC setup. One NIC is your public
>> interface, the other is in
>> >your private LAN. If you are behind a router/firewall,
>> you can use your
>> >firewall as the public interface. You use one NIC in
the
>> server, configure
>> >it as a remote access server, then access it from the
>> Internet by using port
>> >forwarding on the firewall. (The remote client
connects
>> to the firewall, but
>> >the VPN connection is extended to the server on the
LAN
>> by port forwarding).
>> >
>> > To use two NICs in this situation, you have to
>> configure your netwrok so
>> >that the server is the default gateway of your LAN,
and
>> only the server has
>> >a connection to the router. The router/server
connection
>> and the LAN must be
>> >in different IP subnets.
>> >
>> >"damonj" <(E-Mail Removed)> wrote
in
>> message
>> >news:c9f901c48a32$6b268160$(E-Mail Removed)...
>> >> Hi All,
>> >>
>> >> I ran the configure your serer wizard to set up VPN
on
>> my
>> >> 2003 Server.The wizard completed successfully, but
I'm
>> >> kind of stuck now;
>> >>
>> >> Q: The wizard stated that i needed 2 nic's, one for
>> local
>> >> network connection and the other for the internet.
>> Should
>> >> the one for the internet be connected in front of my
>> >> firewall appliance (sonicwall), directly to one of
the
>> >> ethernet output jacks on my DSL router or should i
>> >> connect it behind my firewall, to one of the 24
ports
>> >> on my switch?
>> >>
>> >> Q: After that, how do i set up remote clients to use
>> the
>> >> VPN connection?
>> >>
>> >> Q: Where, besides Windows help, can i go for
thourough
>> >> information on server and client installation?
>> >>
>> >> TIA,
>> >> Damon
>> >
>> >
>> >.
>> >
>
>
>.
>