|
||||||||
|
|
#1
|
|
First of all I would like to apologize for my ignorance to the group, I am
just learning this stuff! I would appreciate feedback and coaching on this! I am trying to install a VPN internet connection from one site to another through DSL and a small routers at each end! I have and internal network of 192.168.0.1-254 set up on the small router where the server is located! I have installed two network cards on the Server, both are plugged into the same hub on the network.... 1- has the address of 192.168.0.20 , the other I have assigned to the external address to be seen on the VPN internet connection which is a static IP assigned by qwest I set up the VPN and remote access in the server, as soon I start the remote access server I lose connectivity to the internal network and the internet I reviewed the interfaces and static routes and it looks like the VPN interface had routes and is marked active/readable, although the internal network card is showing not active and is not responding and showing unreadable as an interface...... I know I have missed something not sure what! I am thinking I need to add a route but not sure how and if this is correct! I look forward to your comments and appreciate your help! Jim Jim Anderson |
|
#2
|
|||
|
|||
|
In the advanced tcp/ip properties of the VPN connection
make sure you take the check mark out of "use default gateway on remote network". "Jim Anderson" <(E-Mail Removed)> wrote in message > First of all I would like to apologize for my ignorance to the group, I am > just learning this stuff! > > I would appreciate feedback and coaching on this! > > I am trying to install a VPN internet connection from one site to another > through DSL and a small routers at each end! > > I have and internal network of 192.168.0.1-254 set up on the small router > where the server is located! > > I have installed two network cards on the Server, both are plugged into the > same hub on the network.... > > 1- has the address of 192.168.0.20 , the other I have assigned to the > external address to be seen on the VPN internet connection which is a static > IP assigned by qwest > > I set up the VPN and remote access in the server, as soon I start the remote > access server I lose connectivity to the internal network and the internet > > I reviewed the interfaces and static routes and it looks like the VPN > interface had routes and is marked active/readable, although the internal > network card is showing not active and is not responding and showing > unreadable as an interface...... > > I know I have missed something not sure what! > I am thinking I need to add a route but not sure how and if this is correct! > > I look forward to your comments and appreciate your help! |
|
#3
|
|||
|
|||
|
To connect two sites you really should set up a router to router (also
called LAN to LAN) VPN connection. A normal "dialup" type connection is really only suitable for a single client to connect to a server. I would do it in steps. First enable the server at the "home" site for remote access. Check that you can connect to it locally (ie from a local LAN client), then check that you can connect to it from a remote client through the Internet. This may involve using port forwarding if your server is behind a router. When you can connect to the "home" office server this way, look at setting up a routed connection from the "branch" office. Start with the info in Windows server help. Heaps more info available at Microsoft's web site. "Jim Anderson" <(E-Mail Removed)> wrote in message news:QCmCb.270$(E-Mail Removed) .net... > First of all I would like to apologize for my ignorance to the group, I am > just learning this stuff! > > I would appreciate feedback and coaching on this! > > I am trying to install a VPN internet connection from one site to another > through DSL and a small routers at each end! > > I have and internal network of 192.168.0.1-254 set up on the small router > where the server is located! > > I have installed two network cards on the Server, both are plugged into the > same hub on the network.... > > 1- has the address of 192.168.0.20 , the other I have assigned to the > external address to be seen on the VPN internet connection which is a static > IP assigned by qwest > > I set up the VPN and remote access in the server, as soon I start the remote > access server I lose connectivity to the internal network and the internet > > I reviewed the interfaces and static routes and it looks like the VPN > interface had routes and is marked active/readable, although the internal > network card is showing not active and is not responding and showing > unreadable as an interface...... > > I know I have missed something not sure what! > I am thinking I need to add a route but not sure how and if this is correct! > > I look forward to your comments and appreciate your help! > > Jim > > |
|
#4
|
|||
|
|||
|
hello Gang and thanks for the input! I have got both of the networks cards
talking now and when I try and vpn in I get a message that I am not successful because of the firewall/router or login and password is not accepted? So we are making progress Bill I did enable the server now and followed the instructions form MS for PTP and still no go! Ideas? Jim "Bill Grant" <bill_grant at bigpond dot com> wrote in message news:(E-Mail Removed)... > To connect two sites you really should set up a router to router (also > called LAN to LAN) VPN connection. A normal "dialup" type connection is > really only suitable for a single client to connect to a server. > > I would do it in steps. First enable the server at the "home" site for > remote access. Check that you can connect to it locally (ie from a local LAN > client), then check that you can connect to it from a remote client through > the Internet. This may involve using port forwarding if your server is > behind a router. > > When you can connect to the "home" office server this way, look at > setting up a routed connection from the "branch" office. Start with the info > in Windows server help. Heaps more info available at Microsoft's web site. > > "Jim Anderson" <(E-Mail Removed)> wrote in message > news:QCmCb.270$(E-Mail Removed) .net... > > First of all I would like to apologize for my ignorance to the group, I am > > just learning this stuff! > > > > I would appreciate feedback and coaching on this! > > > > I am trying to install a VPN internet connection from one site to another > > through DSL and a small routers at each end! > > > > I have and internal network of 192.168.0.1-254 set up on the small router > > where the server is located! > > > > I have installed two network cards on the Server, both are plugged into > the > > same hub on the network.... > > > > 1- has the address of 192.168.0.20 , the other I have assigned to the > > external address to be seen on the VPN internet connection which is a > static > > IP assigned by qwest > > > > I set up the VPN and remote access in the server, as soon I start the > remote > > access server I lose connectivity to the internal network and the internet > > > > I reviewed the interfaces and static routes and it looks like the VPN > > interface had routes and is marked active/readable, although the internal > > network card is showing not active and is not responding and showing > > unreadable as an interface...... > > > > I know I have missed something not sure what! > > I am thinking I need to add a route but not sure how and if this is > correct! > > > > I look forward to your comments and appreciate your help! > > > > Jim > > > > > > |
|
#5
|
|||
|
|||
|
Part of the problem is:
"I have installed two network cards on the Server, both are plugged into the same hub on the network...." You have 2 mutually exclusive choices: 1. Assign the public IP to the router: Use one network card on the server and use your DSL router to map port 1723 and GRE 47 to the server's 192.168.0.x address - assuming the 'router' has this capability; or 2. Assign the public IP to the server and make the server be the router: Use 2 network cards in the server - connect the DSL cable directly to one of them and connect the other to the hub to which all other computers are connected. Doug Sherman MCSE Win2k/NT4.0, MCSA, MCP+I, MVP "Jim Anderson" <(E-Mail Removed)> wrote in message news:eMJCb.2661$(E-Mail Removed) nk.net... > hello Gang and thanks for the input! I have got both of the networks cards > talking now and when I try and vpn in I get a message that I am not > successful because of the firewall/router or login and password is not > accepted? > > So we are making progress > > Bill I did enable the server now and followed the instructions form MS for > PTP and still no go! > > Ideas? > > > Jim > "Bill Grant" <bill_grant at bigpond dot com> wrote in message > news:(E-Mail Removed)... > > To connect two sites you really should set up a router to router (also > > called LAN to LAN) VPN connection. A normal "dialup" type connection is > > really only suitable for a single client to connect to a server. > > > > I would do it in steps. First enable the server at the "home" site for > > remote access. Check that you can connect to it locally (ie from a local > LAN > > client), then check that you can connect to it from a remote client > through > > the Internet. This may involve using port forwarding if your server is > > behind a router. > > > > When you can connect to the "home" office server this way, look at > > setting up a routed connection from the "branch" office. Start with the > info > > in Windows server help. Heaps more info available at Microsoft's web site. > > > > "Jim Anderson" <(E-Mail Removed)> wrote in message > > news:QCmCb.270$(E-Mail Removed) .net... > > > First of all I would like to apologize for my ignorance to the group, I > am > > > just learning this stuff! > > > > > > I would appreciate feedback and coaching on this! > > > > > > I am trying to install a VPN internet connection from one site to > another > > > through DSL and a small routers at each end! > > > > > > I have and internal network of 192.168.0.1-254 set up on the small > router > > > where the server is located! > > > > > > I have installed two network cards on the Server, both are plugged into > > the > > > same hub on the network.... > > > > > > 1- has the address of 192.168.0.20 , the other I have assigned to the > > > external address to be seen on the VPN internet connection which is a > > static > > > IP assigned by qwest > > > > > > I set up the VPN and remote access in the server, as soon I start the > > remote > > > access server I lose connectivity to the internal network and the > internet > > > > > > I reviewed the interfaces and static routes and it looks like the VPN > > > interface had routes and is marked active/readable, although the > internal > > > network card is showing not active and is not responding and showing > > > unreadable as an interface...... > > > > > > I know I have missed something not sure what! > > > I am thinking I need to add a route but not sure how and if this is > > correct! > > > > > > I look forward to your comments and appreciate your help! > > > > > > Jim > > > > > > > > > > > > |
|
#6
|
|||
|
|||
|
Good point, Doug. I missed the two NICs plugged into the same hub.
Because of the router, your server is not connected directly to the Internet, but has a private address. The VPN connection has to be made initially to a public IP, so you must connect to the router and forward the PPTP traffic to the server. And as Doug pointed out, it will fail if the router blocks GRE. (GRE is IP protocol 47). The simplest solution is to run the server with one NIC and forward PPTP to the server's 192.168.0 IP. If you use two NICs, they must be in different IP subnets, with one connected to the hub and the other to the router. As Doug said, you can use either method, but you can't mix them. Using the two NIC method works, but complicates the routing. The "public" NIC of the server is in the same subnet as the router. The "private" NIC is in the same subnet as the LAN clients (all plugged into the hub), and the server becomes the default route of the LAN machines. This looks like the normal two NIC setup, but you have the extra "link" subnet between the server and the router to cope with. "Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)... > Part of the problem is: > > "I have installed two network cards on the Server, both are plugged into the > same hub on the network...." > > You have 2 mutually exclusive choices: > > 1. Assign the public IP to the router: Use one network card on the server > and use your DSL router to map port 1723 and GRE 47 to the server's > 192.168.0.x address - assuming the 'router' has this capability; or > > 2. Assign the public IP to the server and make the server be the router: > Use 2 network cards in the server - connect the DSL cable directly to one of > them and connect the other to the hub to which all other computers are > connected. > > Doug Sherman > MCSE Win2k/NT4.0, MCSA, MCP+I, MVP > > "Jim Anderson" <(E-Mail Removed)> wrote in message > news:eMJCb.2661$(E-Mail Removed) nk.net... > > hello Gang and thanks for the input! I have got both of the networks cards > > talking now and when I try and vpn in I get a message that I am not > > successful because of the firewall/router or login and password is not > > accepted? > > > > So we are making progress > > > > Bill I did enable the server now and followed the instructions form MS for > > PTP and still no go! > > > > Ideas? > > > > > > Jim > > "Bill Grant" <bill_grant at bigpond dot com> wrote in message > > news:(E-Mail Removed)... > > > To connect two sites you really should set up a router to router > (also > > > called LAN to LAN) VPN connection. A normal "dialup" type connection is > > > really only suitable for a single client to connect to a server. > > > > > > I would do it in steps. First enable the server at the "home" site > for > > > remote access. Check that you can connect to it locally (ie from a local > > LAN > > > client), then check that you can connect to it from a remote client > > through > > > the Internet. This may involve using port forwarding if your server is > > > behind a router. > > > > > > When you can connect to the "home" office server this way, look at > > > setting up a routed connection from the "branch" office. Start with the > > info > > > in Windows server help. Heaps more info available at Microsoft's web > site. > > > > > > "Jim Anderson" <(E-Mail Removed)> wrote in message > > > news:QCmCb.270$(E-Mail Removed) .net... > > > > First of all I would like to apologize for my ignorance to the group, > I > > am > > > > just learning this stuff! > > > > > > > > I would appreciate feedback and coaching on this! > > > > > > > > I am trying to install a VPN internet connection from one site to > > another > > > > through DSL and a small routers at each end! > > > > > > > > I have and internal network of 192.168.0.1-254 set up on the small > > router > > > > where the server is located! > > > > > > > > I have installed two network cards on the Server, both are plugged > into > > > the > > > > same hub on the network.... > > > > > > > > 1- has the address of 192.168.0.20 , the other I have assigned to the > > > > external address to be seen on the VPN internet connection which is a > > > static > > > > IP assigned by qwest > > > > > > > > I set up the VPN and remote access in the server, as soon I start the > > > remote > > > > access server I lose connectivity to the internal network and the > > internet > > > > > > > > I reviewed the interfaces and static routes and it looks like the VPN > > > > interface had routes and is marked active/readable, although the > > internal > > > > network card is showing not active and is not responding and showing > > > > unreadable as an interface...... > > > > > > > > I know I have missed something not sure what! > > > > I am thinking I need to add a route but not sure how and if this is > > > correct! > > > > > > > > I look forward to your comments and appreciate your help! > > > > > > > > Jim > > > > > > > > > > > > > > > > > > > > |
|
#7
|
|||
|
|||
|
Again thanks to the group!
Can we run VPN through the internet without 2 network cards? Jim "Bill Grant" <bill_grant at bigpond dot com> wrote in message news:(E-Mail Removed)... > Good point, Doug. I missed the two NICs plugged into the same hub. > > Because of the router, your server is not connected directly to the > Internet, but has a private address. The VPN connection has to be made > initially to a public IP, so you must connect to the router and forward the > PPTP traffic to the server. And as Doug pointed out, it will fail if the > router blocks GRE. (GRE is IP protocol 47). > > The simplest solution is to run the server with one NIC and forward PPTP > to the server's 192.168.0 IP. If you use two NICs, they must be in > different IP subnets, with one connected to the hub and the other to the > router. As Doug said, you can use either method, but you can't mix them. > > Using the two NIC method works, but complicates the routing. The > "public" NIC of the server is in the same subnet as the router. The > "private" NIC is in the same subnet as the LAN clients (all plugged into the > hub), and the server becomes the default route of the LAN machines. This > looks like the normal two NIC setup, but you have the extra "link" subnet > between the server and the router to cope with. > > "Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message > news:(E-Mail Removed)... > > Part of the problem is: > > > > "I have installed two network cards on the Server, both are plugged into > the > > same hub on the network...." > > > > You have 2 mutually exclusive choices: > > > > 1. Assign the public IP to the router: Use one network card on the > server > > and use your DSL router to map port 1723 and GRE 47 to the server's > > 192.168.0.x address - assuming the 'router' has this capability; or > > > > 2. Assign the public IP to the server and make the server be the router: > > Use 2 network cards in the server - connect the DSL cable directly to one > of > > them and connect the other to the hub to which all other computers are > > connected. > > > > Doug Sherman > > MCSE Win2k/NT4.0, MCSA, MCP+I, MVP > > > > "Jim Anderson" <(E-Mail Removed)> wrote in message > > news:eMJCb.2661$(E-Mail Removed) nk.net... > > > hello Gang and thanks for the input! I have got both of the networks > cards > > > talking now and when I try and vpn in I get a message that I am not > > > successful because of the firewall/router or login and password is not > > > accepted? > > > > > > So we are making progress > > > > > > Bill I did enable the server now and followed the instructions form MS > for > > > PTP and still no go! > > > > > > Ideas? > > > > > > > > > Jim > > > "Bill Grant" <bill_grant at bigpond dot com> wrote in message > > > news:(E-Mail Removed)... > > > > To connect two sites you really should set up a router to router > > (also > > > > called LAN to LAN) VPN connection. A normal "dialup" type connection > is > > > > really only suitable for a single client to connect to a server. > > > > > > > > I would do it in steps. First enable the server at the "home" site > > for > > > > remote access. Check that you can connect to it locally (ie from a > local > > > LAN > > > > client), then check that you can connect to it from a remote client > > > through > > > > the Internet. This may involve using port forwarding if your server is > > > > behind a router. > > > > > > > > When you can connect to the "home" office server this way, look at > > > > setting up a routed connection from the "branch" office. Start with > the > > > info > > > > in Windows server help. Heaps more info available at Microsoft's web > > site. > > > > > > > > "Jim Anderson" <(E-Mail Removed)> wrote in message > > > > news:QCmCb.270$(E-Mail Removed) .net... > > > > > First of all I would like to apologize for my ignorance to the > group, > > I > > > am > > > > > just learning this stuff! > > > > > > > > > > I would appreciate feedback and coaching on this! > > > > > > > > > > I am trying to install a VPN internet connection from one site to > > > another > > > > > through DSL and a small routers at each end! > > > > > > > > > > I have and internal network of 192.168.0.1-254 set up on the small > > > router > > > > > where the server is located! > > > > > > > > > > I have installed two network cards on the Server, both are plugged > > into > > > > the > > > > > same hub on the network.... > > > > > > > > > > 1- has the address of 192.168.0.20 , the other I have assigned to > the > > > > > external address to be seen on the VPN internet connection which is > a > > > > static > > > > > IP assigned by qwest > > > > > > > > > > I set up the VPN and remote access in the server, as soon I start > the > > > > remote > > > > > access server I lose connectivity to the internal network and the > > > internet > > > > > > > > > > I reviewed the interfaces and static routes and it looks like the > VPN > > > > > interface had routes and is marked active/readable, although the > > > internal > > > > > network card is showing not active and is not responding and showing > > > > > unreadable as an interface...... > > > > > > > > > > I know I have missed something not sure what! > > > > > I am thinking I need to add a route but not sure how and if this is > > > > correct! > > > > > > > > > > I look forward to your comments and appreciate your help! > > > > > > > > > > Jim > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > |
|
#8
|
|||
|
|||
|
The short answer is yes. The long answer goes like this.
If your server is directly connected to the Internet with a public IP, you use two NICs in your VPN server. One is connected to the Internet and the other to your LAN. You connect through the Internet to your public interface and establish a VPN connection so that remote users can access your private LAN. If your server is instead on a private LAN and connected to the Internet by a router, you do not need a public interface on the server. The router will act as your public interface. The clients will connect initially to this public interface on the router. The VPN traffic will be forwarded through the LAN from the router to the server by port forwarding. All this means is that when the router receives a PPTP packet it will not process it, but forward it to the VPN server for processing. Apart from the packet forwarding, everything remains the same. The server receives the packet, strips the extra headers and decrypts the payload to retrieve the original (privately addressed) frame, just as it does in the directly connected case. For traffic in the other direction, the server receives the frame from the LAN interface, encrypts it and encloses it in the PPTP header with the clients public IP on the outside. This packet is sent to the router which sends it off through the Internet, just like any other packet. "Jim Anderson" <(E-Mail Removed)> wrote in message news:uu1Db.3736$(E-Mail Removed) ink.net... > Again thanks to the group! > > Can we run VPN through the internet without 2 network cards? > > Jim > "Bill Grant" <bill_grant at bigpond dot com> wrote in message > news:(E-Mail Removed)... > > Good point, Doug. I missed the two NICs plugged into the same hub. > > > > Because of the router, your server is not connected directly to the > > Internet, but has a private address. The VPN connection has to be made > > initially to a public IP, so you must connect to the router and forward > the > > PPTP traffic to the server. And as Doug pointed out, it will fail if the > > router blocks GRE. (GRE is IP protocol 47). > > > > The simplest solution is to run the server with one NIC and forward > PPTP > > to the server's 192.168.0 IP. If you use two NICs, they must be in > > different IP subnets, with one connected to the hub and the other to the > > router. As Doug said, you can use either method, but you can't mix them. > > > > Using the two NIC method works, but complicates the routing. The > > "public" NIC of the server is in the same subnet as the router. The > > "private" NIC is in the same subnet as the LAN clients (all plugged into > the > > hub), and the server becomes the default route of the LAN machines. This > > looks like the normal two NIC setup, but you have the extra "link" subnet > > between the server and the router to cope with. > > > > "Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message > > news:(E-Mail Removed)... > > > Part of the problem is: > > > > > > "I have installed two network cards on the Server, both are plugged into > > the > > > same hub on the network...." > > > > > > You have 2 mutually exclusive choices: > > > > > > 1. Assign the public IP to the router: Use one network card on the > > server > > > and use your DSL router to map port 1723 and GRE 47 to the server's > > > 192.168.0.x address - assuming the 'router' has this capability; or > > > > > > 2. Assign the public IP to the server and make the server be the > router: > > > Use 2 network cards in the server - connect the DSL cable directly to > one > > of > > > them and connect the other to the hub to which all other computers are > > > connected. > > > > > > Doug Sherman > > > MCSE Win2k/NT4.0, MCSA, MCP+I, MVP > > > > > > "Jim Anderson" <(E-Mail Removed)> wrote in message > > > news:eMJCb.2661$(E-Mail Removed) nk.net... > > > > hello Gang and thanks for the input! I have got both of the networks > > cards > > > > talking now and when I try and vpn in I get a message that I am not > > > > successful because of the firewall/router or login and password is not > > > > accepted? > > > > > > > > So we are making progress > > > > > > > > Bill I did enable the server now and followed the instructions form MS > > for > > > > PTP and still no go! > > > > > > > > Ideas? > > > > > > > > > > > > Jim > > > > "Bill Grant" <bill_grant at bigpond dot com> wrote in message > > > > news:(E-Mail Removed)... > > > > > To connect two sites you really should set up a router to router > > > (also > > > > > called LAN to LAN) VPN connection. A normal "dialup" type connection > > is > > > > > really only suitable for a single client to connect to a server. > > > > > > > > > > I would do it in steps. First enable the server at the "home" > site > > > for > > > > > remote access. Check that you can connect to it locally (ie from a > > local > > > > LAN > > > > > client), then check that you can connect to it from a remote client > > > > through > > > > > the Internet. This may involve using port forwarding if your server > is > > > > > behind a router. > > > > > > > > > > When you can connect to the "home" office server this way, look > at > > > > > setting up a routed connection from the "branch" office. Start with > > the > > > > info > > > > > in Windows server help. Heaps more info available at Microsoft's web > > > site. > > > > > > > > > > "Jim Anderson" <(E-Mail Removed)> wrote in message > > > > > news:QCmCb.270$(E-Mail Removed) .net... > > > > > > First of all I would like to apologize for my ignorance to the > > group, > > > I > > > > am > > > > > > just learning this stuff! > > > > > > > > > > > > I would appreciate feedback and coaching on this! > > > > > > > > > > > > I am trying to install a VPN internet connection from one site to > > > > another > > > > > > through DSL and a small routers at each end! > > > > > > > > > > > > I have and internal network of 192.168.0.1-254 set up on the small > > > > router > > > > > > where the server is located! > > > > > > > > > > > > I have installed two network cards on the Server, both are plugged > > > into > > > > > the > > > > > > same hub on the network.... > > > > > > > > > > > > 1- has the address of 192.168.0.20 , the other I have assigned to > > the > > > > > > external address to be seen on the VPN internet connection which > is > > a > > > > > static > > > > > > IP assigned by qwest > > > > > > > > > > > > I set up the VPN and remote access in the server, as soon I start > > the > > > > > remote > > > > > > access server I lose connectivity to the internal network and the > > > > internet > > > > > > > > > > > > I reviewed the interfaces and static routes and it looks like the > > VPN > > > > > > interface had routes and is marked active/readable, although the > > > > internal > > > > > > network card is showing not active and is not responding and > showing > > > > > > unreadable as an interface...... > > > > > > > > > > > > I know I have missed something not sure what! > > > > > > I am thinking I need to add a route but not sure how and if this > is > > > > > correct! > > > > > > > > > > > > I look forward to your comments and appreciate your help! > > > > > > > > > > > > Jim > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > |
![]() |
| Tags |
| 2000, trouble, vpn, window |
| Thread Tools | |
| Display Modes | |
|
|