windows 2003 vpn server in local lan behind us robotice 8022 router

Hi!

I have the following components:

I have a local network (private ip's 192.168.200.x) and an us robotics
router with a cable modem (static ip). My network users go over that router
into the internet.

I also have a notebook (windows xp) and a pocker pc (windows 2003).
I go with my nokia handy and the notebook with gprs into the internet.


In that local network I have a windows 2003 member server (only one network
card - also IP 192.168.200.x). Here I want to install windows 2003 vpn
server.
On the notebook client I want to install windows xp vpn client.

When I install the windows 2003 vpn server software I could not finish
because he needs two network cards!
Have I also something to configure in my router menu?
(US Robotics Modell 8022 - the following router description:
automatic passthrough of encrypted data through NAT, PPTP packets are
allowed to pass through, router supports IPSEC)


Is my computer environment which I have wrong for VPN configuration? Need I
a DMZ?

Thanks!

"Hubert Mayr" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Is my computer environment which I have wrong for VPN configuration? Need
I
> a DMZ?

The ideal situation would be if the USR Router can also server as a VPN
Server. If it cannot then you probably will need to create a new subnet.
This would be between the USR Router and the rest of your network, so it
would be similar to a DMZ but not exactly the same thing, it would just
simply be two private subnets on the same private LAN. There is no "NAT"
between these two subnets like there would be a DMZ, it would just be normal
Layer3 routing, that's why I don't consider it a DMZ

Yes, that means all your machines and clients would get re-addressed, unless
the USR Router can change the address set it uses on the internal side, if
it can then just change it instead (but some can't). The duel-nic VPN
machine would double as the VPN Server and the LAN Router and would site
right between the two subnets with your network on one side and the USR
Router on the otherside. Your machines would use it for their Default
Gateway and then it would use the USR Router as its Default Gateway.
Thereis a few things to deal with this properly, but if you're familiar with
general networking well enough you shouldn't have any problems.

But!...If it was me, I would either try to use the USR Router as the VPN Box
or replace it with one that has the ability to do so, then you aren't having
to redesign your whole netowrk for the sake of this.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com