Remote client access to srv behind router

I want to use a laptop that is currently connecting to a server (DC) on a LAN
and give it remote access to the server resources from a remote location. The
server currently sits behind a router and the server is runnning Win Srv 2003
Std Ed.
Clearly this will be a VPN connection and the user profile will need to be
permitted remote access.

Once the VPN connection is established to the router, what else needs to be
done to give the user access to shared resources on the server? Also is there
anything else that needs to be done to permit the user to print locally at
their remote location.

Lastly, when looking at routers other than it needing to support VPN
connections are there any other features that the router needs to have?

Thanks

in this case, I would use VPN + RDC. that means estabishing the VPN first and then use RDC to access the server.
For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I recommend Brinkster for web hosting!

"Don" <(E-Mail Removed)> wrote in message news:2AC3C8F1-C6C2-4D5D-AD2F-(E-Mail Removed)...
I want to use a laptop that is currently connecting to a server (DC) on a LAN
and give it remote access to the server resources from a remote location. The
server currently sits behind a router and the server is runnning Win Srv 2003
Std Ed.
Clearly this will be a VPN connection and the user profile will need to be
permitted remote access.

Once the VPN connection is established to the router, what else needs to be
done to give the user access to shared resources on the server? Also is there
anything else that needs to be done to permit the user to print locally at
their remote location.

Lastly, when looking at routers other than it needing to support VPN
connections are there any other features that the router needs to have?

Thanks

Robert,

I'm not looking to use Remote Desktop. My post indicated that I'm looking to
establish a connection to the VPN router and then the need to access
resources on the server. The user will have their laptop with them. There
will not be a Remote Desktop to operate.

Thanks, but I'm not looking for a consultant.

Don


"Robert L [MS-MVP]" wrote:

> in this case, I would use VPN + RDC. that means estabishing the VPN first and then use RDC to access the server.
> For more and other information, go to http://howtonetworking.com.
>
> Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
> I recommend Brinkster for web hosting!
>
> "Don" <(E-Mail Removed)> wrote in message news:2AC3C8F1-C6C2-4D5D-AD2F-(E-Mail Removed)...
> I want to use a laptop that is currently connecting to a server (DC) on a LAN
> and give it remote access to the server resources from a remote location. The
> server currently sits behind a router and the server is runnning Win Srv 2003
> Std Ed.
> Clearly this will be a VPN connection and the user profile will need to be
> permitted remote access.
>
> Once the VPN connection is established to the router, what else needs to be
> done to give the user access to shared resources on the server? Also is there
> anything else that needs to be done to permit the user to print locally at
> their remote location.
>
> Lastly, when looking at routers other than it needing to support VPN
> connections are there any other features that the router needs to have?
>
> Thanks

There is no simple answer to this if we don't know what the target
router is. Is this router capable of hosting a VPN connection by itself? Or
will you need to use the remote server as the VPN endpoint? The two
situations are very different.

If the server is to host the VPN connection, you will need to use port
forwarding on the router to extend the VPN connection to the server.

Don wrote:
> Robert,
>
> I'm not looking to use Remote Desktop. My post indicated that I'm
> looking to establish a connection to the VPN router and then the need
> to access resources on the server. The user will have their laptop
> with them. There will not be a Remote Desktop to operate.
>
> Thanks, but I'm not looking for a consultant.
>
> Don
>
>
> "Robert L [MS-MVP]" wrote:
>
>> in this case, I would use VPN + RDC. that means estabishing the VPN
>> first and then use RDC to access the server.
>> For more and other information, go to http://howtonetworking.com.
>>
>> Don't send e-mail or reply to me except you need consulting
>> services. Posting on MS newsgroup will benefit all readers and you
>> may get more help.
>>
>> Bob Lin, MS-MVP, MCSE & CNE
>> How to Setup Windows, Network, Remote Access on
>> http://www.HowToNetworking.com
>> Networking, Internet, Routing, VPN Troubleshooting on
>> http://www.ChicagoTech.net
>> This posting is provided "AS IS" with no warranties.
>> I recommend Brinkster for web hosting!
>>
>> "Don" <(E-Mail Removed)> wrote in message
>> news:2AC3C8F1-C6C2-4D5D-AD2F-(E-Mail Removed)... I want
>> to use a laptop that is currently connecting to a server (DC) on a
>> LAN and give it remote access to the server resources from a
>> remote location. The server currently sits behind a router and the
>> server is runnning Win Srv 2003 Std Ed. Clearly this will be a VPN
>> connection and the user profile will need to be permitted remote
>> access.
>>
>> Once the VPN connection is established to the router, what else
>> needs to be done to give the user access to shared resources on
>> the server? Also is there anything else that needs to be done to
>> permit the user to print locally at their remote location.
>>
>> Lastly, when looking at routers other than it needing to support
>> VPN connections are there any other features that the router needs
>> to have?
>>
>> Thanks

Hey Bill,

The VPN endpoint is the router.

At this point I've setup the laptop with a VPN connection and I'm able to
establish the VPN connection from the laptop to the VPN router. Now I need to
be able to gain access to the servers shared resources.

Just to make sure we're on the same page. The laptop is config'd to connect
to the office domain server when the laptop is in the office. It's this same
laptop that's going to be mobile. The laptop needs to be able to connect to
the VPN router and then make use of the same server shared resources it has
in the office. There is only one server which is the DC and it's running
DHCP, AD, WINS, & DNS. ISA is not involved.

As best I understand the roadblock to be. Even though I have established a
connection to the VPN Router, I'm still not logged onto the network itself.
Thus no access to the LAN behind the router is being given.

An extra detail: When the user powers up the laptop they are still required
to "logon" to the laptop just as if their in the office. The third field on
the logon screen still reflect the domain not "local" computer.

Hope this helps clarify.

Thanks for the feedback.
Don

"Bill Grant" wrote:

> There is no simple answer to this if we don't know what the target
> router is. Is this router capable of hosting a VPN connection by itself? Or
> will you need to use the remote server as the VPN endpoint? The two
> situations are very different.
>
> If the server is to host the VPN connection, you will need to use port
> forwarding on the router to extend the VPN connection to the server.
>
> Don wrote:
> > Robert,
> >
> > I'm not looking to use Remote Desktop. My post indicated that I'm
> > looking to establish a connection to the VPN router and then the need
> > to access resources on the server. The user will have their laptop
> > with them. There will not be a Remote Desktop to operate.
> >
> > Thanks, but I'm not looking for a consultant.
> >
> > Don
> >
> >
> > "Robert L [MS-MVP]" wrote:
> >
> >> in this case, I would use VPN + RDC. that means estabishing the VPN
> >> first and then use RDC to access the server.
> >> For more and other information, go to http://howtonetworking.com.
> >>
> >> Don't send e-mail or reply to me except you need consulting
> >> services. Posting on MS newsgroup will benefit all readers and you
> >> may get more help.
> >>
> >> Bob Lin, MS-MVP, MCSE & CNE
> >> How to Setup Windows, Network, Remote Access on
> >> http://www.HowToNetworking.com
> >> Networking, Internet, Routing, VPN Troubleshooting on
> >> http://www.ChicagoTech.net
> >> This posting is provided "AS IS" with no warranties.
> >> I recommend Brinkster for web hosting!
> >>
> >> "Don" <(E-Mail Removed)> wrote in message
> >> news:2AC3C8F1-C6C2-4D5D-AD2F-(E-Mail Removed)... I want
> >> to use a laptop that is currently connecting to a server (DC) on a
> >> LAN and give it remote access to the server resources from a
> >> remote location. The server currently sits behind a router and the
> >> server is runnning Win Srv 2003 Std Ed. Clearly this will be a VPN
> >> connection and the user profile will need to be permitted remote
> >> access.
> >>
> >> Once the VPN connection is established to the router, what else
> >> needs to be done to give the user access to shared resources on
> >> the server? Also is there anything else that needs to be done to
> >> permit the user to print locally at their remote location.
> >>
> >> Lastly, when looking at routers other than it needing to support
> >> VPN connections are there any other features that the router needs
> >> to have?
> >>
> >> Thanks
>
>
>

Making a VPN connection simply sets up an IP connection to the router.
It does not do a domain login (and it doesn't carry LAN broadcasts). The
username/password you supply is only used to validate the fact that you are
entitled to make a VPN connection.

Check that the client has the correct IP address and subnet mask for the
LAN, and the correct DNS address and DNS suffix. Can you ping the DC by
name?


Don wrote:
> Hey Bill,
>
> The VPN endpoint is the router.
>
> At this point I've setup the laptop with a VPN connection and I'm
> able to establish the VPN connection from the laptop to the VPN
> router. Now I need to be able to gain access to the servers shared
> resources.
>
> Just to make sure we're on the same page. The laptop is config'd to
> connect to the office domain server when the laptop is in the office.
> It's this same laptop that's going to be mobile. The laptop needs to
> be able to connect to the VPN router and then make use of the same
> server shared resources it has in the office. There is only one
> server which is the DC and it's running DHCP, AD, WINS, & DNS. ISA is
> not involved.
>
> As best I understand the roadblock to be. Even though I have
> established a connection to the VPN Router, I'm still not logged onto
> the network itself. Thus no access to the LAN behind the router is
> being given.
>
> An extra detail: When the user powers up the laptop they are still
> required to "logon" to the laptop just as if their in the office. The
> third field on the logon screen still reflect the domain not "local"
> computer.
>
> Hope this helps clarify.
>
> Thanks for the feedback.
> Don
>
> "Bill Grant" wrote:
>
>> There is no simple answer to this if we don't know what the
>> target router is. Is this router capable of hosting a VPN connection
>> by itself? Or will you need to use the remote server as the VPN
>> endpoint? The two situations are very different.
>>
>> If the server is to host the VPN connection, you will need to
>> use port forwarding on the router to extend the VPN connection to
>> the server.
>>
>> Don wrote:
>>> Robert,
>>>
>>> I'm not looking to use Remote Desktop. My post indicated that I'm
>>> looking to establish a connection to the VPN router and then the
>>> need to access resources on the server. The user will have their
>>> laptop with them. There will not be a Remote Desktop to operate.
>>>
>>> Thanks, but I'm not looking for a consultant.
>>>
>>> Don
>>>
>>>
>>> "Robert L [MS-MVP]" wrote:
>>>
>>>> in this case, I would use VPN + RDC. that means estabishing the VPN
>>>> first and then use RDC to access the server.
>>>> For more and other information, go to http://howtonetworking.com.
>>>>
>>>> Don't send e-mail or reply to me except you need consulting
>>>> services. Posting on MS newsgroup will benefit all readers and you
>>>> may get more help.
>>>>
>>>> Bob Lin, MS-MVP, MCSE & CNE
>>>> How to Setup Windows, Network, Remote Access on
>>>> http://www.HowToNetworking.com
>>>> Networking, Internet, Routing, VPN Troubleshooting on
>>>> http://www.ChicagoTech.net
>>>> This posting is provided "AS IS" with no warranties.
>>>> I recommend Brinkster for web hosting!
>>>>
>>>> "Don" <(E-Mail Removed)> wrote in message
>>>> news:2AC3C8F1-C6C2-4D5D-AD2F-(E-Mail Removed)... I want
>>>> to use a laptop that is currently connecting to a server (DC) on
>>>> a LAN and give it remote access to the server resources from a
>>>> remote location. The server currently sits behind a router and
>>>> the server is runnning Win Srv 2003 Std Ed. Clearly this will be
>>>> a VPN connection and the user profile will need to be permitted
>>>> remote access.
>>>>
>>>> Once the VPN connection is established to the router, what else
>>>> needs to be done to give the user access to shared resources on
>>>> the server? Also is there anything else that needs to be done to
>>>> permit the user to print locally at their remote location.
>>>>
>>>> Lastly, when looking at routers other than it needing to support
>>>> VPN connections are there any other features that the router
>>>> needs to have?
>>>>
>>>> Thanks

Hey Bill,

Thanks for the follow-up. Yes I'm on the same pg with you about what
establishing a VPN connection to the router accomplishes.

Unfortunately, I will not have access to the laptop until Monday late or
Tues. So I'll try the ping then.

However, I did establish the same VPN connection with another computer from
a remote location that is not config'd for the DC. It's simply the standard
"workgroup" setup. When the VPN connection is made "ipconfig /all" shows the
VPN connection via PPP/SLIP. And is asigned the IP Address setup on the
router VPN config. I do see however that the subnet is wrong. Its showing
255.255.255.255 when it should be 255.255.255.0. Also the Gateway, DNS, and
WINS are wrong.

The connection status, Deatils Tab indicates the Server IP Address as
192.168.2.1 which is the router IP on the LAN side.

With regards to PING. I can ping the DC IP Address but not the DC name.
Based upon the wrong info above, I'm ot going to be able to ping the DC.

Thoughts?
Thanks,
Don

"Bill Grant" wrote:

> Making a VPN connection simply sets up an IP connection to the router.
> It does not do a domain login (and it doesn't carry LAN broadcasts). The
> username/password you supply is only used to validate the fact that you are
> entitled to make a VPN connection.
>
> Check that the client has the correct IP address and subnet mask for the
> LAN, and the correct DNS address and DNS suffix. Can you ping the DC by
> name?
>
>
> Don wrote:
> > Hey Bill,
> >
> > The VPN endpoint is the router.
> >
> > At this point I've setup the laptop with a VPN connection and I'm
> > able to establish the VPN connection from the laptop to the VPN
> > router. Now I need to be able to gain access to the servers shared
> > resources.
> >
> > Just to make sure we're on the same page. The laptop is config'd to
> > connect to the office domain server when the laptop is in the office.
> > It's this same laptop that's going to be mobile. The laptop needs to
> > be able to connect to the VPN router and then make use of the same
> > server shared resources it has in the office. There is only one
> > server which is the DC and it's running DHCP, AD, WINS, & DNS. ISA is
> > not involved.
> >
> > As best I understand the roadblock to be. Even though I have
> > established a connection to the VPN Router, I'm still not logged onto
> > the network itself. Thus no access to the LAN behind the router is
> > being given.
> >
> > An extra detail: When the user powers up the laptop they are still
> > required to "logon" to the laptop just as if their in the office. The
> > third field on the logon screen still reflect the domain not "local"
> > computer.
> >
> > Hope this helps clarify.
> >
> > Thanks for the feedback.
> > Don
> >
> > "Bill Grant" wrote:
> >
> >> There is no simple answer to this if we don't know what the
> >> target router is. Is this router capable of hosting a VPN connection
> >> by itself? Or will you need to use the remote server as the VPN
> >> endpoint? The two situations are very different.
> >>
> >> If the server is to host the VPN connection, you will need to
> >> use port forwarding on the router to extend the VPN connection to
> >> the server.
> >>
> >> Don wrote:
> >>> Robert,
> >>>
> >>> I'm not looking to use Remote Desktop. My post indicated that I'm
> >>> looking to establish a connection to the VPN router and then the
> >>> need to access resources on the server. The user will have their
> >>> laptop with them. There will not be a Remote Desktop to operate.
> >>>
> >>> Thanks, but I'm not looking for a consultant.
> >>>
> >>> Don
> >>>
> >>>
> >>> "Robert L [MS-MVP]" wrote:
> >>>
> >>>> in this case, I would use VPN + RDC. that means estabishing the VPN
> >>>> first and then use RDC to access the server.
> >>>> For more and other information, go to http://howtonetworking.com.
> >>>>
> >>>> Don't send e-mail or reply to me except you need consulting
> >>>> services. Posting on MS newsgroup will benefit all readers and you
> >>>> may get more help.
> >>>>
> >>>> Bob Lin, MS-MVP, MCSE & CNE
> >>>> How to Setup Windows, Network, Remote Access on
> >>>> http://www.HowToNetworking.com
> >>>> Networking, Internet, Routing, VPN Troubleshooting on
> >>>> http://www.ChicagoTech.net
> >>>> This posting is provided "AS IS" with no warranties.
> >>>> I recommend Brinkster for web hosting!
> >>>>
> >>>> "Don" <(E-Mail Removed)> wrote in message
> >>>> news:2AC3C8F1-C6C2-4D5D-AD2F-(E-Mail Removed)... I want
> >>>> to use a laptop that is currently connecting to a server (DC) on
> >>>> a LAN and give it remote access to the server resources from a
> >>>> remote location. The server currently sits behind a router and
> >>>> the server is runnning Win Srv 2003 Std Ed. Clearly this will be
> >>>> a VPN connection and the user profile will need to be permitted
> >>>> remote access.
> >>>>
> >>>> Once the VPN connection is established to the router, what else
> >>>> needs to be done to give the user access to shared resources on
> >>>> the server? Also is there anything else that needs to be done to
> >>>> permit the user to print locally at their remote location.
> >>>>
> >>>> Lastly, when looking at routers other than it needing to support
> >>>> VPN connections are there any other features that the router
> >>>> needs to have?
> >>>>
> >>>> Thanks
>
>
>

"Don" <(E-Mail Removed)> wrote in message
news:1F7187B1-2ED6-49BA-9C05-(E-Mail Removed)...
> I'm not looking to use Remote Desktop. My post indicated that I'm looking
to
> establish a connection to the VPN router and then the need to access
> resources on the server.

Remote Destop and VPN work together. The VPN is established, then RD is run
over the VPN.

> The user will have their laptop with them. There will not be a Remote
Desktop to
> operate.

RD is running on the machine they contact, not the machine they are sitting
at.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"Don" <(E-Mail Removed)> wrote in message
news:6FC5438E-91FB-473C-B2E5-(E-Mail Removed)...
> At this point I've setup the laptop with a VPN connection and I'm able to
> establish the VPN connection from the laptop to the VPN router. Now I need
to
> be able to gain access to the servers shared resources.

Save yourself a TON of trouble. After the VPN connects, use Remote Desktop
from that point. It is the only truely *efficient* way I have ever performed
it.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Hey Phillip,

Thanks for the post. Yes RDC does run on the workstation in the office
however the computer that would be in the office will be traveling with the
user.Thus there is no workstation in the office to RDC. This is the issue.

The user needs to access the shared resources (folders/files) residing on
the server from his remote localtion.

Thoughts?
Don

"Phillip Windell" wrote:

> "Don" <(E-Mail Removed)> wrote in message
> news:6FC5438E-91FB-473C-B2E5-(E-Mail Removed)...
> > At this point I've setup the laptop with a VPN connection and I'm able to
> > establish the VPN connection from the laptop to the VPN router. Now I need
> to
> > be able to gain access to the servers shared resources.
>
> Save yourself a TON of trouble. After the VPN connects, use Remote Desktop
> from that point. It is the only truely *efficient* way I have ever performed
> it.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>