vpn setup, nearly there... client firewall blocking netbios names

hi,
i have a VPN set up on a stand-along web server. the clients can
connect fine, and browse shares via the internal ip address of the
server. however, they can't use the netbios name. i read in the
windows help that you don't need wins or dns for a VPN, you can use
netbios over TCP instead. it is of most importance that clients do the
absolute minimum of configuration necessary. IP address, username,
password is all i want them to have to know to set up a connection.

when the clients turn off the windows firewall on the VPN connection,
the netbios names work fine. when the firewall is turned on they
don't. can anyone suggest a work around for this? preferably without
modifying the clients firewall settings.

server setup:
it's not a DC.
it has one NIC.
the VPN is set up with routing and remote access.
NAT + basic firewall is set up on the external LAN adapter and the
internal one.
IP address assignment is done via a static address pool from
169.254.0.128-255.
enable broadcase name resolution is enabled.
i have netbios over TCP disabled on the external LAN card (i read on a
newsgroup that this was a good idea, but am not sure).

thanks for any help.
tim

"Tim_Mac" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> hi,
> i have a VPN set up on a stand-along web server. the clients can
> connect fine, and browse shares via the internal ip address of the
> server. however, they can't use the netbios name. i read in the
> windows help that you don't need wins or dns for a VPN, you can use
> netbios over TCP instead. it is of most importance that clients do the
> absolute minimum of configuration necessary. IP address, username,
> password is all i want them to have to know to set up a connection.
>
> when the clients turn off the windows firewall on the VPN connection,
> the netbios names work fine. when the firewall is turned on they
> don't. can anyone suggest a work around for this? preferably without
> modifying the clients firewall settings.

Use WINS.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com