Portforwarding L2TP

Hi

I have managed to implement PPTP VPN by setting our 500$ HW FireWALL to
forward port 1723 to our server´s LAN address. Setup was quite easy and it
works fine. We have SBS 2003 DC with one NIC, Routing and Remote Access is
enabled. Because PPTP is not secure enough I wish to implement stronger VPN,
L2TP perhaps.

Can you please let me know if this a good idea and the basic steps how to
implement it?

1. Can I jus t forwad some ports to our server? Which?
2. Do I have configure server except L2TP remote Connections? How?
3. Multipple dynamic IP clients, basic setup to establish L2TP VPN.
4. Is normal SBS CAL enough? 5 CALs = 5 licenses for Remote Access?
5. Any good artichles with real world examples?

I´m really stucked on this. We wish to sell MS based VPN rather than SW VPN
Clients.

Thanks in advantage,

Also

If difficulty of implementing PPTP VPN is up to 3 (scale 1-10) how difficult
it is implement L2TP VPN? Certificates needed? Will Firewall (ZyXEL)
certificates do?

=========

"Juha" wrote:

> Hi
>
> I have managed to implement PPTP VPN by setting our 500$ HW FireWALL to
> forward port 1723 to our server´s LAN address. Setup was quite easy and it
> works fine. We have SBS 2003 DC with one NIC, Routing and Remote Access is
> enabled. Because PPTP is not secure enough I wish to implement stronger VPN,
> L2TP perhaps.
>
> Can you please let me know if this a good idea and the basic steps how to
> implement it?
>
> 1. Can I jus t forwad some ports to our server? Which?
> 2. Do I have configure server except L2TP remote Connections? How?
> 3. Multipple dynamic IP clients, basic setup to establish L2TP VPN.
> 4. Is normal SBS CAL enough? 5 CALs = 5 licenses for Remote Access?
> 5. Any good artichles with real world examples?
>
> I´m really stucked on this. We wish to sell MS based VPN rather than SW VPN
> Clients.
>
> Thanks in advantage,
>

hi,
check this :
http://technet2.microsoft.com/Window....mspx?mfr=true

http://www.microsoft.com/technet/sec...te_access.mspx

--
Dragos CAMARA
MCSA Windows 2003 server


"Juha" wrote:

> Also
>
> If difficulty of implementing PPTP VPN is up to 3 (scale 1-10) how difficult
> it is implement L2TP VPN? Certificates needed? Will Firewall (ZyXEL)
> certificates do?
>
> =========
>
> "Juha" wrote:
>
> > Hi
> >
> > I have managed to implement PPTP VPN by setting our 500$ HW FireWALL to
> > forward port 1723 to our server´s LAN address. Setup was quite easy and it
> > works fine. We have SBS 2003 DC with one NIC, Routing and Remote Access is
> > enabled. Because PPTP is not secure enough I wish to implement stronger VPN,
> > L2TP perhaps.
> >
> > Can you please let me know if this a good idea and the basic steps how to
> > implement it?
> >
> > 1. Can I jus t forwad some ports to our server? Which?
> > 2. Do I have configure server except L2TP remote Connections? How?
> > 3. Multipple dynamic IP clients, basic setup to establish L2TP VPN.
> > 4. Is normal SBS CAL enough? 5 CALs = 5 licenses for Remote Access?
> > 5. Any good artichles with real world examples?
> >
> > I´m really stucked on this. We wish to sell MS based VPN rather than SW VPN
> > Clients.
> >
> > Thanks in advantage,
> >

Thank you very much!

Realloy good advice. I'm working on that right now.
Is it possible to install all in the SBS server? I have at least one strange
problem.



"Dragos CAMARA" wrote:

> hi,
> check this :
> http://technet2.microsoft.com/Window....mspx?mfr=true
>
> http://www.microsoft.com/technet/sec...te_access.mspx
>
> --
> Dragos CAMARA
> MCSA Windows 2003 server
>
>
> "Juha" wrote:
>
> > Also
> >
> > If difficulty of implementing PPTP VPN is up to 3 (scale 1-10) how difficult
> > it is implement L2TP VPN? Certificates needed? Will Firewall (ZyXEL)
> > certificates do?
> >
> > =========
> >
> > "Juha" wrote:
> >
> > > Hi
> > >
> > > I have managed to implement PPTP VPN by setting our 500$ HW FireWALL to
> > > forward port 1723 to our server´s LAN address. Setup was quite easy and it
> > > works fine. We have SBS 2003 DC with one NIC, Routing and Remote Access is
> > > enabled. Because PPTP is not secure enough I wish to implement stronger VPN,
> > > L2TP perhaps.
> > >
> > > Can you please let me know if this a good idea and the basic steps how to
> > > implement it?
> > >
> > > 1. Can I jus t forwad some ports to our server? Which?
> > > 2. Do I have configure server except L2TP remote Connections? How?
> > > 3. Multipple dynamic IP clients, basic setup to establish L2TP VPN.
> > > 4. Is normal SBS CAL enough? 5 CALs = 5 licenses for Remote Access?
> > > 5. Any good artichles with real world examples?
> > >
> > > I´m really stucked on this. We wish to sell MS based VPN rather than SW VPN
> > > Clients.
> > >
> > > Thanks in advantage,
> > >

Hi

I have a little problem. I'm implementing
http://technet2.microsoft.com/Window....mspx?mfr=true
step by step instructions, all in one physical SBS server. Now in the
chapter: "EAP-TLS-based Remote Access VPN Connections" I can't see VPNUser
Template in section 18.

Any ideas?

"Dragos CAMARA" wrote:

> hi,
> check this :
> http://technet2.microsoft.com/Window....mspx?mfr=true
>
> http://www.microsoft.com/technet/sec...te_access.mspx
>
> --
> Dragos CAMARA
> MCSA Windows 2003 server
>
>
> "Juha" wrote:
>
> > Also
> >
> > If difficulty of implementing PPTP VPN is up to 3 (scale 1-10) how difficult
> > it is implement L2TP VPN? Certificates needed? Will Firewall (ZyXEL)
> > certificates do?
> >
> > =========
> >
> > "Juha" wrote:
> >
> > > Hi
> > >
> > > I have managed to implement PPTP VPN by setting our 500$ HW FireWALL to
> > > forward port 1723 to our server´s LAN address. Setup was quite easy and it
> > > works fine. We have SBS 2003 DC with one NIC, Routing and Remote Access is
> > > enabled. Because PPTP is not secure enough I wish to implement stronger VPN,
> > > L2TP perhaps.
> > >
> > > Can you please let me know if this a good idea and the basic steps how to
> > > implement it?
> > >
> > > 1. Can I jus t forwad some ports to our server? Which?
> > > 2. Do I have configure server except L2TP remote Connections? How?
> > > 3. Multipple dynamic IP clients, basic setup to establish L2TP VPN.
> > > 4. Is normal SBS CAL enough? 5 CALs = 5 licenses for Remote Access?
> > > 5. Any good artichles with real world examples?
> > >
> > > I´m really stucked on this. We wish to sell MS based VPN rather than SW VPN
> > > Clients.
> > >
> > > Thanks in advantage,
> > >