linking 2 sites through vpn

I have 2 servers for my domain

one is located internally and is connected to the same network as most of
the computers.

The second is located 2000 miles away in a datacenter. This server runs the
exchagne server and also hosts the vpn for the network (dfs syncs the files)

I need to make it so that everyone can see eachother.

I have tried having the internal server connect to the vpn of the external
server.

If i do this, then the 2 servers can talk, but all of the computers on the
internal network can't talk to the external server.

I can't really afford to put a vpn router in the datacenter.

I have a linksys VPN router (RVS4000) on the internal server, but i can't
install the client software onto the external software to try and connect
them that way.

i am looking for a cheap and simply solution (preferably software based)

thanks.

You're confusing Remote Access VPN technology (users "dailing" in) with
Site-to-Site VPN technology (joining two networks)

It sounds like you "VPN Router" is made for Remote Access VPN and not for
Site-to-Site VPN.

What you need is a Site-to-Site VPN between the two locations. However keep
in mind that VPN does *nothing* except create a "routed link" between the
two locations. Naming functionality in terms of DNS and WINS you have to
create and provide for yourself. It is done the same way as if the two
"networks" were in the same room together with a pair of LAN Routers between
them. The fact that you are using VPN is irrelevant,...it is just two
networks with a routed link between them (however that link is
performed),..it is as simple as that.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"build18er" <(E-Mail Removed)> wrote in message
news2391F0F-7E3F-4A8D-B4FE-(E-Mail Removed)...
>I have 2 servers for my domain
>
> one is located internally and is connected to the same network as most of
> the computers.
>
> The second is located 2000 miles away in a datacenter. This server runs
> the
> exchagne server and also hosts the vpn for the network (dfs syncs the
> files)
>
> I need to make it so that everyone can see eachother.
>
> I have tried having the internal server connect to the vpn of the external
> server.
>
> If i do this, then the 2 servers can talk, but all of the computers on the
> internal network can't talk to the external server.
>
> I can't really afford to put a vpn router in the datacenter.
>
> I have a linksys VPN router (RVS4000) on the internal server, but i can't
> install the client software onto the external software to try and connect
> them that way.
>
> i am looking for a cheap and simply solution (preferably software based)
>
> thanks.

Can I assume you setup VPN on the DC? This is not recommended. If you don't
have other server that can be RRAS and can't offer to buy the hardware VPN
server, you may configure the DC to disable register DNS or WINS on the VPN
interface. This search result may help.

Name resolution on VPNCan't ping VPN client by name Connection issues on DC,
ISA, DNS and WINS server as VPN server DNS and Split Tunneling for VPN? How
to assign DNS and WINS on ...
www.chicagotech.net/nameresolutionpnvpn.htm


--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"build18er" <(E-Mail Removed)> wrote in message
news2391F0F-7E3F-4A8D-B4FE-(E-Mail Removed)...
>I have 2 servers for my domain
>
> one is located internally and is connected to the same network as most of
> the computers.
>
> The second is located 2000 miles away in a datacenter. This server runs
> the
> exchagne server and also hosts the vpn for the network (dfs syncs the
> files)
>
> I need to make it so that everyone can see eachother.
>
> I have tried having the internal server connect to the vpn of the external
> server.
>
> If i do this, then the 2 servers can talk, but all of the computers on the
> internal network can't talk to the external server.
>
> I can't really afford to put a vpn router in the datacenter.
>
> I have a linksys VPN router (RVS4000) on the internal server, but i can't
> install the client software onto the external software to try and connect
> them that way.
>
> i am looking for a cheap and simply solution (preferably software based)
>
> thanks.

I have been experimenting with L2TP,

the problem i am running into is i get the following erro:

The L2TP connection attempt failed because teh security layer encountered a
prossing error during initial negotiations with the remote computer.

I read your post "the 2 servers can talk" so that I was assuming you had a
good connection. You may want to try Windows site to site VPN. This how to
may help.

Site to Site VPNTo setup a Site-to-Site VPN Connection , you may need to
configure two windows servers for the Answering and Calling Routers. Here
are the steps: ...
www.chicagotech.net/site%20to%20site%20vpn.htm


--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"build18er" <(E-Mail Removed)> wrote in message
news:A5AB566B-13D4-468D-83AD-(E-Mail Removed)...
>I have been experimenting with L2TP,
>
> the problem i am running into is i get the following erro:
>
> The L2TP connection attempt failed because teh security layer encountered
> a
> prossing error during initial negotiations with the remote computer.

Hello,

Thank you for your post.

Based on your description, my understanding is that you now have two
Windows Servers located on two sites. On one site, the server is connected
to the internet directly; , on the other site, the server is located behind
a Linksys VPN router. You'd like to connect these two sites with VPN
connection. If there is any misunderstanding, please let me know.

Analysis and Suggestions:
==================

In order to get a better understanding of your current issue, please help
answer the following questions first.

1. Please describe the detailed network topology of two sites.
2. Please tell me whether you built the site to site VPN connection between
two Windows Servers or the VPN tunnel is built from the external Windows
server to Linksys VPN router.
3. Please tell me whether you configured the L2TP/IPSec connection by using
pre-shared key or certificate for authentication.

And the following basic suggestions are for you reference:

1. If you built the VPN connection between two Windows Servers, please
refer to the following articles to confirm your configurations.

Virtual Private Networking with Windows Server 2003: Deploying
Site-to-Site VPNs


http://www.microsoft.com/downloads/d...553-1711-402F-
B451-2F8EA7FAC379&displaylang=en

http://technet2.microsoft.com/Window...7-9482-4316-a2
e9-4e1e295457d71033.mspx?mfr=true

2. As L2TP connection needs IPSEC support, I suggest that you establish a
PPTP VPN connection as a test so that we can isolate the root cause.
Regarding how to deploy PPTP-based Site-to-Site VPN Connection, please
refer to the following article:

http://technet2.microsoft.com/WindowsServer/en

3. If you built the VPN connection from Windows Server to Linksys VPN
router, I recommend you contact to the router manufacture at the same time
to verify the settings on the router are correctly configured.

4. For basic L2TP/IPSec troubleshooting, please refer to the following
Microsoft Knowledge Base article:

259335 Basic L2TP/IPSec troubleshooting in Windows 2000
http://support.microsoft.com/default...b;EN-US;259335

I look forward to hearing from you soon. Thanks.

Sincerely,
Neo Zhu,
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: linking 2 sites through vpn
| thread-index: AcilWq9YJrDKXxPAS+iWkcgI5xCyqQ==
| X-WBNR-Posting-Host: 207.46.192.207
| From: =?Utf-8?B?YnVpbGQxOGVy?= <(E-Mail Removed)>
| Subject: linking 2 sites through vpn
| Date: Wed, 23 Apr 2008 08:57:08 -0700
| Lines: 25
| Message-ID: <D2391F0F-7E3F-4A8D-B4FE-(E-Mail Removed)>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.networking
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.networking:12337
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.networking
|
| I have 2 servers for my domain
|
| one is located internally and is connected to the same network as most of
| the computers.
|
| The second is located 2000 miles away in a datacenter. This server runs
the
| exchagne server and also hosts the vpn for the network (dfs syncs the
files)
|
| I need to make it so that everyone can see eachother.
|
| I have tried having the internal server connect to the vpn of the
external
| server.
|
| If i do this, then the 2 servers can talk, but all of the computers on
the
| internal network can't talk to the external server.
|
| I can't really afford to put a vpn router in the datacenter.
|
| I have a linksys VPN router (RVS4000) on the internal server, but i can't
| install the client software onto the external software to try and connect
| them that way.
|
| i am looking for a cheap and simply solution (preferably software based)
|
| thanks.
|

I'd recommend some cheap Zyxel routers. I know you said you can't afford the
hardware but they are a very cheap solution.


"build18er" <(E-Mail Removed)> wrote in message
news2391F0F-7E3F-4A8D-B4FE-(E-Mail Removed)...
>I have 2 servers for my domain
>
> one is located internally and is connected to the same network as most of
> the computers.
>
> The second is located 2000 miles away in a datacenter. This server runs
> the
> exchagne server and also hosts the vpn for the network (dfs syncs the
> files)
>
> I need to make it so that everyone can see eachother.
>
> I have tried having the internal server connect to the vpn of the external
> server.
>
> If i do this, then the 2 servers can talk, but all of the computers on the
> internal network can't talk to the external server.
>
> I can't really afford to put a vpn router in the datacenter.
>
> I have a linksys VPN router (RVS4000) on the internal server, but i can't
> install the client software onto the external software to try and connect
> them that way.
>
> i am looking for a cheap and simply solution (preferably software based)
>
> thanks.