Router and vpn server

What are the ports to open or bypass in my router or firewall if i need
to enable external user to access my vpn server using windows server
2003 ? Pls advise . Thanks

Regards
Daniel

The below ports need to be opened:

For PPTP connections

PPTP --> TCP 1723

For L2TP connections

L2TP --> UDP 1701
IKE --> UDP 500
NAT-T --> UDP 4500

--
Thanks,
Janani [MSFT]
http://blogs.msdn.com/rrasblog
---------------------------------------------------------------------------
"This posting is provided "AS IS" with no warranties, and confers no
rights."

"Daniel" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> What are the ports to open or bypass in my router or firewall if i need
> to enable external user to access my vpn server using windows server
> 2003 ? Pls advise . Thanks
>
> Regards
> Daniel
>

If i have a vpn router in my network, do i still have to setup vpn
server in windows 2003 ? does it still server any purpose ? just let my
user access some shared folder would be enough ?

Rgds
Daniel


Janani [MSFT] wrote:
> The below ports need to be opened:
>
> For PPTP connections
>
> PPTP --> TCP 1723
>
> For L2TP connections
>
> L2TP --> UDP 1701
> IKE --> UDP 500
> NAT-T --> UDP 4500
>
> --
> Thanks,
> Janani [MSFT]
> http://blogs.msdn.com/rrasblog
> ---------------------------------------------------------------------------
> "This posting is provided "AS IS" with no warranties, and confers no
> rights."
>
> "Daniel" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) oups.com...
> > What are the ports to open or bypass in my router or firewall if i need
> > to enable external user to access my vpn server using windows server
> > 2003 ? Pls advise . Thanks
> >
> > Regards
> > Daniel
> >

It depends on which router model. If you have VPN built-in router, you don't need Windows VPN. If it is VPN pass-through, you may need Windows VPN or setup IPSec VPN. These link may help,

VPN Setup The VPN server should have a static IP address and assign the arrange IP addresses to ... The VPN server must also be configured with DNS and WINS server ...
www.chicagotech.net/vpnsetup.htm

vpn solutions
VPN Solutions. 1. Peer to Peer VPN 2. Client to Server VPN 3. Site to Site VPN 4.
IPSec VPN 5. Exporting VPN Client Settings ...
www.chicagotech.net/vpnsolutions.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Daniel" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) oups.com...
If i have a vpn router in my network, do i still have to setup vpn
server in windows 2003 ? does it still server any purpose ? just let my
user access some shared folder would be enough ?

Rgds
Daniel


Janani [MSFT] wrote:
> The below ports need to be opened:
>
> For PPTP connections
>
> PPTP --> TCP 1723
>
> For L2TP connections
>
> L2TP --> UDP 1701
> IKE --> UDP 500
> NAT-T --> UDP 4500
>
> --
> Thanks,
> Janani [MSFT]
> http://blogs.msdn.com/rrasblog
> ---------------------------------------------------------------------------
> "This posting is provided "AS IS" with no warranties, and confers no
> rights."
>
> "Daniel" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) oups.com...
> > What are the ports to open or bypass in my router or firewall if i need
> > to enable external user to access my vpn server using windows server
> > 2003 ? Pls advise . Thanks
> >
> > Regards
> > Daniel
> >

Does VPN requires 2 NICs ?

Regards
Daniel

Robert L [MS-MVP] wrote:
> It depends on which router model. If you have VPN built-in router, you don't need Windows VPN. If it is VPN pass-through, you may need Windows VPN or setup IPSec VPN. These link may help,
>
> VPN Setup The VPN server should have a static IP address and assign the arrange IP addresses to ... The VPN server must also be configured with DNS and WINS server ...
> www.chicagotech.net/vpnsetup.htm
>
> vpn solutions
> VPN Solutions. 1. Peer to Peer VPN 2. Client to Server VPN 3. Site to Site VPN 4.
> IPSec VPN 5. Exporting VPN Client Settings ...
> www.chicagotech.net/vpnsolutions.htm
>
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Daniel" <(E-Mail Removed)> wrote in message news:(E-Mail Removed) oups.com...
> If i have a vpn router in my network, do i still have to setup vpn
> server in windows 2003 ? does it still server any purpose ? just let my
> user access some shared folder would be enough ?
>
> Rgds
> Daniel
>
>
> Janani [MSFT] wrote:
> > The below ports need to be opened:
> >
> > For PPTP connections
> >
> > PPTP --> TCP 1723
> >
> > For L2TP connections
> >
> > L2TP --> UDP 1701
> > IKE --> UDP 500
> > NAT-T --> UDP 4500
> >
> > --
> > Thanks,
> > Janani [MSFT]
> > http://blogs.msdn.com/rrasblog
> > ---------------------------------------------------------------------------
> > "This posting is provided "AS IS" with no warranties, and confers no
> > rights."
> >
> > "Daniel" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed) oups.com...
> > > What are the ports to open or bypass in my router or firewall if i need
> > > to enable external user to access my vpn server using windows server
> > > 2003 ? Pls advise . Thanks
> > >
> > > Regards
> > > Daniel
> > >
>
> ------=_NextPart_000_0084_01C65D50.C20AC390
> Content-Type: text/html; charset=iso-8859-1
> Content-Transfer-Encoding: quoted-printable
> X-Google-AttachSize: 4049
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML><HEAD>
> <META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
> <META content="MSHTML 6.00.2900.2802" name=GENERATOR>
> <STYLE></STYLE>
> </HEAD>
> <BODY bgColor=#ffffff>
> <DIV><FONT size=2>It depends on which router model. If you have VPN built-in
> router, you don't need Windows VPN. If it is VPN pass-through, you may need
> Windows VPN or setup IPSec VPN. These link may help,</FONT></DIV>
> <DIV><FONT size=2></FONT>&nbsp;</DIV>
> <DIV><A class=l href="http://www.chicagotech.net/vpnsetup.htm"><FONT
> color=#663399><B>VPN</B> Setup</FONT></A>
> <TABLE cellSpacing=0 cellPadding=0 border=0>
> <TBODY>
> <TR>
> <TD class=j>
> <DIV><FONT size=-1>The <B>VPN</B> server should have a static IP address
> and assign the arrange IP addresses to <B>...</B> The <B>VPN</B> server
> must also be configured with DNS and WINS server <B>...</B><BR><FONT
> color=#008000><A
> href="http://www.chicagotech.net/vpnsetup.htm">www.chicagotech.net/<B>vpn</B>setup.htm</A>
> </FONT></FONT></DIV>
> <DIV><FONT size=2></FONT>&nbsp;</DIV>
> <DIV><A class=l
> href="http://www.chicagotech.net/vpnsolutions.htm"><B><FONT
> color=#663399>vpn solutions</FONT></B></A><BR><FONT size=-1><B>VPN
> Solutions</B>. 1. Peer to Peer <B>VPN</B> 2. Client to Server <B>VPN</B>
> 3. Site to Site <B>VPN</B> 4.<BR>IPSec <B>VPN</B> 5. Exporting <B>VPN</B>
> Client Settings <B>...</B><BR><FONT color=#008000><A
> href="http://www.chicagotech.net/vpnsolutions.htm">www.chicagotech.net/<B>vpn</B><B>solutions</B>.htm</A>
> </FONT></FONT></DIV></TD></TR></TBODY></TABLE></DIV>
> <DIV><BR>Bob Lin, MS-MVP, MCSE &amp; CNE<BR>Networking, Internet, Routing, VPN
> Troubleshooting on <A
> href="http://www.ChicagoTech.net">http://www.ChicagoTech.net</A> <BR>How to
> Setup Windows, Network, VPN &amp; Remote Access on <A
> href="http://www.HowToNetworking.com">http://www.HowToNetworking.com</A> </DIV>
> <BLOCKQUOTE
> style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
> <DIV>"Daniel" &lt;<A
> href="mailto(E-Mail Removed)">Danieltbt05@gm ail.com</A>&gt; wrote in
> message <A
> href="news:(E-Mail Removed) oglegroups.com">news:1144755462.385855.278480@t31g 2000cwb.googlegroups.com</A>...</DIV>If
> i have a vpn router in my network, do i still have to setup vpn<BR>server in
> windows 2003 ? does it still server any purpose ? just let my<BR>user access
> some shared folder would be enough ?<BR><BR>Rgds<BR>Daniel<BR><BR><BR>Janani
> [MSFT] wrote:<BR>&gt; The below ports need to be opened:<BR>&gt;<BR>&gt; For
> PPTP connections<BR>&gt;<BR>&gt; PPTP --&gt; TCP 1723<BR>&gt;<BR>&gt; For L2TP
> connections<BR>&gt;<BR>&gt; L2TP --&gt; UDP 1701<BR>&gt; IKE --&gt; UDP
> 500<BR>&gt; NAT-T --&gt; UDP 4500<BR>&gt;<BR>&gt; --<BR>&gt; Thanks,<BR>&gt;
> Janani [MSFT]<BR>&gt; <A
> href="http://blogs.msdn.com/rrasblog">http://blogs.msdn.com/rrasblog</A><BR>&gt;
> ---------------------------------------------------------------------------<BR>&gt;
> "This posting is provided "AS IS" with no warranties, and confers no<BR>&gt;
> rights."<BR>&gt;<BR>&gt; "Daniel" &lt;<A
> href="mailto(E-Mail Removed)">Danieltbt05@gm ail.com</A>&gt; wrote in
> message<BR>&gt; <A
> href="news:(E-Mail Removed) oglegroups.com">news:1144732422.172529.180940@e56g 2000cwe.googlegroups.com</A>...<BR>&gt;
> &gt; What are the ports to open or bypass in my router or firewall if i
> need<BR>&gt; &gt; to enable external user to access my vpn server using
> windows server<BR>&gt; &gt; 2003 ? Pls advise . Thanks<BR>&gt; &gt;<BR>&gt;
> &gt; Regards<BR>&gt; &gt; Daniel<BR>&gt; &gt;<BR></BLOCKQUOTE></BODY></HTML>
>
> ------=_NextPart_000_0084_01C65D50.C20AC390--

No. You only need two NICs if you do not have a router/firewall/NAT
device.

In the two NIC setup, one NIC connects to the private LAN and the other
to the Internet. If you have an Interent connection through another device,
the VPN traffic comes over the LAN to the server's LAN NIC.

In fact you can set up the server with one NIC as a VPN server and test
your setup locally by connecting from a workstation on the LAN.

Daniel wrote:
> Does VPN requires 2 NICs ?
>
> Regards
> Daniel
>
> Robert L [MS-MVP] wrote:
>> It depends on which router model. If you have VPN built-in router,
>> you don't need Windows VPN. If it is VPN pass-through, you may need
>> Windows VPN or setup IPSec VPN. These link may help,
>>
>> VPN Setup The VPN server should have a static IP address and assign
>> the arrange IP addresses to ... The VPN server must also be
>> configured with DNS and WINS server ...
>> www.chicagotech.net/vpnsetup.htm
>>
>> vpn solutions
>> VPN Solutions. 1. Peer to Peer VPN 2. Client to Server VPN 3.
>> Site to Site VPN 4. IPSec VPN 5. Exporting VPN Client Settings
>> ... www.chicagotech.net/vpnsolutions.htm
>>
>>
>> Bob Lin, MS-MVP, MCSE & CNE
>> Networking, Internet, Routing, VPN Troubleshooting on
>> http://www.ChicagoTech.net
>> How to Setup Windows, Network, VPN & Remote Access on
>> http://www.HowToNetworking.com "Daniel" <(E-Mail Removed)>
>> wrote in message
>> news:(E-Mail Removed) oups.com... If i
>> have a vpn router in my network, do i still have to setup vpn
>> server in windows 2003 ? does it still server any purpose ? just let
>> my user access some shared folder would be enough ?
>>
>> Rgds
>> Daniel
>>
>>
>> Janani [MSFT] wrote:
>> > The below ports need to be opened:
>> >
>> > For PPTP connections
>> >
>> > PPTP --> TCP 1723
>> >
>> > For L2TP connections
>> >
>> > L2TP --> UDP 1701
>> > IKE --> UDP 500
>> > NAT-T --> UDP 4500
>> >
>> > --
>> > Thanks,
>> > Janani [MSFT]
>> > http://blogs.msdn.com/rrasblog
>> >
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> ---------------------------------------------------------------------------
>> > "This posting is provided "AS IS" with no warranties, and confers
>> no > rights." > > "Daniel" <(E-Mail Removed)> wrote in message
>> > news:(E-Mail Removed) oups.com... > >
>> What are the ports to open or bypass in my router or firewall if i
>> need > > to enable external user to access my vpn server using
>> windows server > > 2003 ? Pls advise . Thanks > > > > Regards > >
>> Daniel > >
>>
>> ------=_NextPart_000_0084_01C65D50.C20AC390
>> Content-Type: text/html; charset=iso-8859-1
>> Content-Transfer-Encoding: quoted-printable
>> X-Google-AttachSize: 4049
>>
>> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
>> <HTML><HEAD>
>> <META http-equiv=Content-Type content="text/html;
>> charset=iso-8859-1"> <META content="MSHTML 6.00.2900.2802"
>> name=GENERATOR> <STYLE></STYLE>
>> </HEAD>
>> <BODY bgColor=#ffffff>
>> <DIV><FONT size=2>It depends on which router model. If you have VPN
>> built-in
>> router, you don't need Windows VPN. If it is VPN pass-through, you
>> may need
>> Windows VPN or setup IPSec VPN. These link may help,</FONT></DIV>
>> <DIV><FONT size=2></FONT>&nbsp;</DIV>
>> <DIV><A class=l href="http://www.chicagotech.net/vpnsetup.htm"><FONT
>> color=#663399><B>VPN</B> Setup</FONT></A>
>> <TABLE cellSpacing=0 cellPadding=0 border=0>
>> <TBODY>
>> <TR>
>> <TD class=j>
>> <DIV><FONT size=-1>The <B>VPN</B> server should have a static
>> IP address and assign the arrange IP addresses to <B>...</B>
>> The <B>VPN</B> server must also be configured with DNS and
>> WINS server <B>...</B><BR><FONT color=#008000><A
>>
>>
>>
>>
>>
>>
>>
>> href="http://www.chicagotech.net/vpnsetup.htm">www.chicagotech.net/<B>vpn</B>setup.htm</A>
>> </FONT></FONT></DIV> <DIV><FONT size=2></FONT>&nbsp;</DIV> <DIV><A
>> class=l href="http://www.chicagotech.net/vpnsolutions.htm"><B><FONT
>> color=#663399>vpn solutions</FONT></B></A><BR><FONT size=-1><B>VPN
>> Solutions</B>. 1. Peer to Peer <B>VPN</B> 2. Client to Server
>> <B>VPN</B>
>> 3. Site to Site <B>VPN</B> 4.<BR>IPSec <B>VPN</B> 5. Exporting
>> <B>VPN</B> Client Settings <B>...</B><BR><FONT color=#008000><A
>>
>>
>> href="http://www.chicagotech.net/vpnsolutions.htm">www.chicagotech.net/<B>vpn</B><B>solutions</B>.htm</A>
>> </FONT></FONT></DIV></TD></TR></TBODY></TABLE></DIV> <DIV><BR>Bob
>> Lin, MS-MVP, MCSE &amp; CNE<BR>Networking, Internet, Routing, VPN
>> Troubleshooting on <A
>> href="http://www.ChicagoTech.net">http://www.ChicagoTech.net</A>
>> <BR>How to
>> Setup Windows, Network, VPN &amp; Remote Access on <A
>> href="http://www.HowToNetworking.com">http://www.HowToNetworking.com</A>
>> </DIV> <BLOCKQUOTE
>> style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px;
>> BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"> <DIV>"Daniel"
>> &lt;<A
>> href="mailto(E-Mail Removed)">Danieltbt05@gm ail.com</A>&gt;
>> wrote in message <A
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> href="news:(E-Mail Removed) oglegroups.com">news:1144755462.385855.278480@t31g 2000cwb.googlegroups.com</A>...</DIV>If
>> i have a vpn router in my network, do i still have to setup
>> vpn<BR>server in windows 2003 ? does it still server any purpose ?
>> just let my<BR>user access some shared folder would be enough
>> ?<BR><BR>Rgds<BR>Daniel<BR><BR><BR>Janani [MSFT] wrote:<BR>&gt; The
>> below ports need to be opened:<BR>&gt;<BR>&gt; For PPTP
>> connections<BR>&gt;<BR>&gt; PPTP --&gt; TCP 1723<BR>&gt;<BR>&gt; For
>> L2TP connections<BR>&gt;<BR>&gt; L2TP --&gt; UDP 1701<BR>&gt; IKE
>> --&gt; UDP 500<BR>&gt; NAT-T --&gt; UDP 4500<BR>&gt;<BR>&gt;
>> --<BR>&gt; Thanks,<BR>&gt; Janani [MSFT]<BR>&gt; <A
>> href="http://blogs.msdn.com/rrasblog">http://blogs.msdn.com/rrasblog</A><BR>&gt;
>> ---------------------------------------------------------------------------<BR>&gt;
>> "This posting is provided "AS IS" with no warranties, and confers
>> no<BR>&gt; rights."<BR>&gt;<BR>&gt; "Daniel" &lt;<A
>> href="mailto(E-Mail Removed)">Danieltbt05@gm ail.com</A>&gt;
>> wrote in message<BR>&gt; <A
>> href="news:(E-Mail Removed) oglegroups.com">news:1144732422.172529.180940@e56g 2000cwe.googlegroups.com</A>...<BR>&gt;
>> &gt; What are the ports to open or bypass in my router or firewall
>> if i need<BR>&gt; &gt; to enable external user to access my vpn
>> server using windows server<BR>&gt; &gt; 2003 ? Pls advise .
>> Thanks<BR>&gt; &gt;<BR>&gt; &gt; Regards<BR>&gt; &gt; Daniel<BR>&gt;
>> &gt;<BR></BLOCKQUOTE></BODY></HTML>
>>
>> ------=_NextPart_000_0084_01C65D50.C20AC390--

Hi, i managed to setup vpn in my LAN. My server assign ip using a pool
of static ip but my client has to use "obtain ip dynamically" in order
for vpn to be connected. If my client setup using a static ip, it
display error message 735 tcp cp control protocol. Is this correct ?

Regards
Daniel




Bill Grant wrote:
> No. You only need two NICs if you do not have a router/firewall/NAT
> device.
>
> In the two NIC setup, one NIC connects to the private LAN and the other
> to the Internet. If you have an Interent connection through another device,
> the VPN traffic comes over the LAN to the server's LAN NIC.
>
> In fact you can set up the server with one NIC as a VPN server and test
> your setup locally by connecting from a workstation on the LAN.
>
> Daniel wrote:
> > Does VPN requires 2 NICs ?
> >
> > Regards
> > Daniel
> >
> > Robert L [MS-MVP] wrote:
> >> It depends on which router model. If you have VPN built-in router,
> >> you don't need Windows VPN. If it is VPN pass-through, you may need
> >> Windows VPN or setup IPSec VPN. These link may help,
> >>
> >> VPN Setup The VPN server should have a static IP address and assign
> >> the arrange IP addresses to ... The VPN server must also be
> >> configured with DNS and WINS server ...
> >> www.chicagotech.net/vpnsetup.htm
> >>
> >> vpn solutions
> >> VPN Solutions. 1. Peer to Peer VPN 2. Client to Server VPN 3.
> >> Site to Site VPN 4. IPSec VPN 5. Exporting VPN Client Settings
> >> ... www.chicagotech.net/vpnsolutions.htm
> >>
> >>
> >> Bob Lin, MS-MVP, MCSE & CNE
> >> Networking, Internet, Routing, VPN Troubleshooting on
> >> http://www.ChicagoTech.net
> >> How to Setup Windows, Network, VPN & Remote Access on
> >> http://www.HowToNetworking.com "Daniel" <(E-Mail Removed)>
> >> wrote in message
> >> news:(E-Mail Removed) oups.com... If i
> >> have a vpn router in my network, do i still have to setup vpn
> >> server in windows 2003 ? does it still server any purpose ? just let
> >> my user access some shared folder would be enough ?
> >>
> >> Rgds
> >> Daniel
> >>
> >>
> >> Janani [MSFT] wrote:
> >> > The below ports need to be opened:
> >> >
> >> > For PPTP connections
> >> >
> >> > PPTP --> TCP 1723
> >> >
> >> > For L2TP connections
> >> >
> >> > L2TP --> UDP 1701
> >> > IKE --> UDP 500
> >> > NAT-T --> UDP 4500
> >> >
> >> > --
> >> > Thanks,
> >> > Janani [MSFT]
> >> > http://blogs.msdn.com/rrasblog
> >> >
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >> ---------------------------------------------------------------------------
> >> > "This posting is provided "AS IS" with no warranties, and confers
> >> no > rights." > > "Daniel" <(E-Mail Removed)> wrote in message
> >> > news:(E-Mail Removed) oups.com... > >
> >> What are the ports to open or bypass in my router or firewall if i
> >> need > > to enable external user to access my vpn server using
> >> windows server > > 2003 ? Pls advise . Thanks > > > > Regards > >
> >> Daniel > >
> >>
> >> ------=_NextPart_000_0084_01C65D50.C20AC390
> >> Content-Type: text/html; charset=iso-8859-1
> >> Content-Transfer-Encoding: quoted-printable
> >> X-Google-AttachSize: 4049
> >>
> >> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> >> <HTML><HEAD>
> >> <META http-equiv=Content-Type content="text/html;
> >> charset=iso-8859-1"> <META content="MSHTML 6.00.2900.2802"
> >> name=GENERATOR> <STYLE></STYLE>
> >> </HEAD>
> >> <BODY bgColor=#ffffff>
> >> <DIV><FONT size=2>It depends on which router model. If you have VPN
> >> built-in
> >> router, you don't need Windows VPN. If it is VPN pass-through, you
> >> may need
> >> Windows VPN or setup IPSec VPN. These link may help,</FONT></DIV>
> >> <DIV><FONT size=2></FONT>&nbsp;</DIV>
> >> <DIV><A class=l href="http://www.chicagotech.net/vpnsetup.htm"><FONT
> >> color=#663399><B>VPN</B> Setup</FONT></A>
> >> <TABLE cellSpacing=0 cellPadding=0 border=0>
> >> <TBODY>
> >> <TR>
> >> <TD class=j>
> >> <DIV><FONT size=-1>The <B>VPN</B> server should have a static
> >> IP address and assign the arrange IP addresses to <B>...</B>
> >> The <B>VPN</B> server must also be configured with DNS and
> >> WINS server <B>...</B><BR><FONT color=#008000><A
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >> href="http://www.chicagotech.net/vpnsetup.htm">www.chicagotech.net/<B>vpn</B>setup.htm</A>
> >> </FONT></FONT></DIV> <DIV><FONT size=2></FONT>&nbsp;</DIV> <DIV><A
> >> class=l href="http://www.chicagotech.net/vpnsolutions.htm"><B><FONT
> >> color=#663399>vpn solutions</FONT></B></A><BR><FONT size=-1><B>VPN
> >> Solutions</B>. 1. Peer to Peer <B>VPN</B> 2. Client to Server
> >> <B>VPN</B>
> >> 3. Site to Site <B>VPN</B> 4.<BR>IPSec <B>VPN</B> 5. Exporting
> >> <B>VPN</B> Client Settings <B>...</B><BR><FONT color=#008000><A
> >>
> >>
> >> href="http://www.chicagotech.net/vpnsolutions.htm">www.chicagotech.net/<B>vpn</B><B>solutions</B>.htm</A>
> >> </FONT></FONT></DIV></TD></TR></TBODY></TABLE></DIV> <DIV><BR>Bob
> >> Lin, MS-MVP, MCSE &amp; CNE<BR>Networking, Internet, Routing, VPN
> >> Troubleshooting on <A
> >> href="http://www.ChicagoTech.net">http://www.ChicagoTech.net</A>
> >> <BR>How to
> >> Setup Windows, Network, VPN &amp; Remote Access on <A
> >> href="http://www.HowToNetworking.com">http://www.HowToNetworking.com</A>
> >> </DIV> <BLOCKQUOTE
> >> style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px;
> >> BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"> <DIV>"Daniel"
> >> &lt;<A
> >> href="mailto(E-Mail Removed)">Danieltbt05@gm ail.com</A>&gt;
> >> wrote in message <A
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >> href="news:(E-Mail Removed) oglegroups.com">news:1144755462.385855.278480@t31g 2000cwb.googlegroups.com</A>...</DIV>If
> >> i have a vpn router in my network, do i still have to setup
> >> vpn<BR>server in windows 2003 ? does it still server any purpose ?
> >> just let my<BR>user access some shared folder would be enough
> >> ?<BR><BR>Rgds<BR>Daniel<BR><BR><BR>Janani [MSFT] wrote:<BR>&gt; The
> >> below ports need to be opened:<BR>&gt;<BR>&gt; For PPTP
> >> connections<BR>&gt;<BR>&gt; PPTP --&gt; TCP 1723<BR>&gt;<BR>&gt; For
> >> L2TP connections<BR>&gt;<BR>&gt; L2TP --&gt; UDP 1701<BR>&gt; IKE
> >> --&gt; UDP 500<BR>&gt; NAT-T --&gt; UDP 4500<BR>&gt;<BR>&gt;
> >> --<BR>&gt; Thanks,<BR>&gt; Janani [MSFT]<BR>&gt; <A
> >> href="http://blogs.msdn.com/rrasblog">http://blogs.msdn.com/rrasblog</A><BR>&gt;
> >> ---------------------------------------------------------------------------<BR>&gt;
> >> "This posting is provided "AS IS" with no warranties, and confers
> >> no<BR>&gt; rights."<BR>&gt;<BR>&gt; "Daniel" &lt;<A
> >> href="mailto(E-Mail Removed)">Danieltbt05@gm ail.com</A>&gt;
> >> wrote in message<BR>&gt; <A
> >> href="news:(E-Mail Removed) oglegroups.com">news:1144732422.172529.180940@e56g 2000cwe.googlegroups.com</A>...<BR>&gt;
> >> &gt; What are the ports to open or bypass in my router or firewall
> >> if i need<BR>&gt; &gt; to enable external user to access my vpn
> >> server using windows server<BR>&gt; &gt; 2003 ? Pls advise .
> >> Thanks<BR>&gt; &gt;<BR>&gt; &gt; Regards<BR>&gt; &gt; Daniel<BR>&gt;
> >> &gt;<BR></BLOCKQUOTE></BODY></HTML>
> >>
> >> ------=_NextPart_000_0084_01C65D50.C20AC390--

In most cases, yes. The client gets its IP from the VPN server as part
of the connection setup. Using a static IP is possible in some cases but it
won't work by default.

Daniel wrote:
> Hi, i managed to setup vpn in my LAN. My server assign ip using a pool
> of static ip but my client has to use "obtain ip dynamically" in order
> for vpn to be connected. If my client setup using a static ip, it
> display error message 735 tcp cp control protocol. Is this correct ?
>
> Regards
> Daniel
>
>
>
>
> Bill Grant wrote:
>> No. You only need two NICs if you do not have a router/firewall/NAT
>> device.
>>
>> In the two NIC setup, one NIC connects to the private LAN and
>> the other to the Internet. If you have an Interent connection
>> through another device, the VPN traffic comes over the LAN to the
>> server's LAN NIC.
>>
>> In fact you can set up the server with one NIC as a VPN server
>> and test your setup locally by connecting from a workstation on the
>> LAN.
>>
>> Daniel wrote:
>>> Does VPN requires 2 NICs ?
>>>
>>> Regards
>>> Daniel
>>>
>>> Robert L [MS-MVP] wrote:
>>>> It depends on which router model. If you have VPN built-in router,
>>>> you don't need Windows VPN. If it is VPN pass-through, you may need
>>>> Windows VPN or setup IPSec VPN. These link may help,
>>>>
>>>> VPN Setup The VPN server should have a static IP address and assign
>>>> the arrange IP addresses to ... The VPN server must also be
>>>> configured with DNS and WINS server ...
>>>> www.chicagotech.net/vpnsetup.htm
>>>>
>>>> vpn solutions
>>>> VPN Solutions. 1. Peer to Peer VPN 2. Client to Server VPN 3.
>>>> Site to Site VPN 4. IPSec VPN 5. Exporting VPN Client
>>>> Settings ... www.chicagotech.net/vpnsolutions.htm
>>>>
>>>>
>>>> Bob Lin, MS-MVP, MCSE & CNE
>>>> Networking, Internet, Routing, VPN Troubleshooting on
>>>> http://www.ChicagoTech.net
>>>> How to Setup Windows, Network, VPN & Remote Access on
>>>> http://www.HowToNetworking.com "Daniel" <(E-Mail Removed)>
>>>> wrote in message
>>>> news:(E-Mail Removed) oups.com... If
>>>> i have a vpn router in my network, do i still have to setup vpn
>>>> server in windows 2003 ? does it still server any purpose ? just
>>>> let my user access some shared folder would be enough ?
>>>>
>>>> Rgds
>>>> Daniel
>>>>
>>>>
>>>> Janani [MSFT] wrote:
>>>> > The below ports need to be opened:
>>>> >
>>>> > For PPTP connections
>>>> >
>>>> > PPTP --> TCP 1723
>>>> >
>>>> > For L2TP connections
>>>> >
>>>> > L2TP --> UDP 1701
>>>> > IKE --> UDP 500
>>>> > NAT-T --> UDP 4500
>>>> >
>>>> > --
>>>> > Thanks,
>>>> > Janani [MSFT]
>>>> > http://blogs.msdn.com/rrasblog
>>>> >
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ---------------------------------------------------------------------------
>>>>> "This posting is provided "AS IS" with no warranties, and confers
>>>> no > rights." > > "Daniel" <(E-Mail Removed)> wrote in message
>>>>> news:(E-Mail Removed) oups.com... > >
>>>> What are the ports to open or bypass in my router or firewall if i
>>>> need > > to enable external user to access my vpn server using
>>>> windows server > > 2003 ? Pls advise . Thanks > > > > Regards > >
>>>> Daniel > >
>>>>
>>>> ------=_NextPart_000_0084_01C65D50.C20AC390
>>>> Content-Type: text/html; charset=iso-8859-1
>>>> Content-Transfer-Encoding: quoted-printable
>>>> X-Google-AttachSize: 4049
>>>>
>>>> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
>>>> <HTML><HEAD>
>>>> <META http-equiv=Content-Type content="text/html;
>>>> charset=iso-8859-1"> <META content="MSHTML 6.00.2900.2802"
>>>> name=GENERATOR> <STYLE></STYLE>
>>>> </HEAD>
>>>> <BODY bgColor=#ffffff>
>>>> <DIV><FONT size=2>It depends on which router model. If you have VPN
>>>> built-in
>>>> router, you don't need Windows VPN. If it is VPN pass-through, you
>>>> may need
>>>> Windows VPN or setup IPSec VPN. These link may help,</FONT></DIV>
>>>> <DIV><FONT size=2></FONT>&nbsp;</DIV>
>>>> <DIV><A class=l
>>>> href="http://www.chicagotech.net/vpnsetup.htm"><FONT
>>>> color=#663399><B>VPN</B> Setup</FONT></A> <TABLE cellSpacing=0
>>>> cellPadding=0 border=0> <TBODY>
>>>> <TR>
>>>> <TD class=j>
>>>> <DIV><FONT size=-1>The <B>VPN</B> server should have a static
>>>> IP address and assign the arrange IP addresses to <B>...</B>
>>>> The <B>VPN</B> server must also be configured with DNS and
>>>> WINS server <B>...</B><BR><FONT color=#008000><A
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> href="http://www.chicagotech.net/vpnsetup.htm">www.chicagotech.net/<B>vpn</B>setup.htm</A>
>>>> </FONT></FONT></DIV> <DIV><FONT size=2></FONT>&nbsp;</DIV> <DIV><A
>>>> class=l href="http://www.chicagotech.net/vpnsolutions.htm"><B><FONT
>>>> color=#663399>vpn solutions</FONT></B></A><BR><FONT size=-1><B>VPN
>>>> Solutions</B>. 1. Peer to Peer <B>VPN</B> 2. Client to Server
>>>> <B>VPN</B>
>>>> 3. Site to Site <B>VPN</B> 4.<BR>IPSec <B>VPN</B> 5.
>>>> Exporting <B>VPN</B> Client Settings <B>...</B><BR><FONT
>>>> color=#008000><A
>>>>
>>>>
>>>> href="http://www.chicagotech.net/vpnsolutions.htm">www.chicagotech.net/<B>vpn</B><B>solutions</B>.htm</A>
>>>> </FONT></FONT></DIV></TD></TR></TBODY></TABLE></DIV> <DIV><BR>Bob
>>>> Lin, MS-MVP, MCSE &amp; CNE<BR>Networking, Internet, Routing, VPN
>>>> Troubleshooting on <A
>>>> href="http://www.ChicagoTech.net">http://www.ChicagoTech.net</A>
>>>> <BR>How to
>>>> Setup Windows, Network, VPN &amp; Remote Access on <A
>>>> href="http://www.HowToNetworking.com">http://www.HowToNetworking.com</A>
>>>> </DIV> <BLOCKQUOTE
>>>> style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px;
>>>> BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"> <DIV>"Daniel"
>>>> &lt;<A
>>>> href="mailto(E-Mail Removed)">Danieltbt05@gm ail.com</A>&gt;
>>>> wrote in message <A
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> href="news:(E-Mail Removed) oglegroups.com">news:1144755462.385855.278480@t31g 2000cwb.googlegroups.com</A>...</DIV>If
>>>> i have a vpn router in my network, do i still have to setup
>>>> vpn<BR>server in windows 2003 ? does it still server any purpose ?
>>>> just let my<BR>user access some shared folder would be enough
>>>> ?<BR><BR>Rgds<BR>Daniel<BR><BR><BR>Janani [MSFT] wrote:<BR>&gt; The
>>>> below ports need to be opened:<BR>&gt;<BR>&gt; For PPTP
>>>> connections<BR>&gt;<BR>&gt; PPTP --&gt; TCP 1723<BR>&gt;<BR>&gt;
>>>> For L2TP connections<BR>&gt;<BR>&gt; L2TP --&gt; UDP 1701<BR>&gt;
>>>> IKE
>>>> --&gt; UDP 500<BR>&gt; NAT-T --&gt; UDP 4500<BR>&gt;<BR>&gt;
>>>> --<BR>&gt; Thanks,<BR>&gt; Janani [MSFT]<BR>&gt; <A
>>>> href="http://blogs.msdn.com/rrasblog">http://blogs.msdn.com/rrasblog</A><BR>&gt;
>>>> ---------------------------------------------------------------------------<BR>&gt;
>>>> "This posting is provided "AS IS" with no warranties, and confers
>>>> no<BR>&gt; rights."<BR>&gt;<BR>&gt; "Daniel" &lt;<A
>>>> href="mailto(E-Mail Removed)">Danieltbt05@gm ail.com</A>&gt;
>>>> wrote in message<BR>&gt; <A
>>>> href="news:(E-Mail Removed) oglegroups.com">news:1144732422.172529.180940@e56g 2000cwe.googlegroups.com</A>...<BR>&gt;
>>>> &gt; What are the ports to open or bypass in my router or firewall
>>>> if i need<BR>&gt; &gt; to enable external user to access my vpn
>>>> server using windows server<BR>&gt; &gt; 2003 ? Pls advise .
>>>> Thanks<BR>&gt; &gt;<BR>&gt; &gt; Regards<BR>&gt; &gt;
>>>> Daniel<BR>&gt; &gt;<BR></BLOCKQUOTE></BODY></HTML>
>>>>
>>>> ------=_NextPart_000_0084_01C65D50.C20AC390--