Re: Setting up SBS 2000 w/SonicWall Firewall VPN, Need help.

From: Jim Behning (jimbehningmvp_at_atl.mindspring.com)
Date: 05/20/04


Date: Thu, 20 May 2004 23:18:23 GMT

Where does the Sonic end the tunnel. On the external network of your
SBS or the internal network? If you have two nics and are using SBS
then I would guess you are on the wrong side of SBS. Can you then make
a Microsoft vpn to get in to your internal network? Some of the Sonics
do not support GRE 47 so the answer might be no. A firewall that
allows termination on the wrong side of your server is not too
helpful. I would guess again that with a single nic server that the
Sonic would be of value. If it ends on the inernal ip of the network
then what happens when you Start-Run \\servername or
\\serverinternalip ?

"Mike" <tech@phase1mw.com> wrote:

>Hi James,
>First off, thanks for the reply, I'm also glad to know that someone else
>with the same setup got it working.The reason we upgraded to SOHO 3 was
>because of a promo which offered 5 VPN's. We did not have VPN on our SOHO 2.
>So basically, what I'm tyring to do is simply get our VPN to work. I called
>sonicawall support to walk me through setting up and activating the VPN on
>the firewall. Then I went home, installed the sonicwall client software on
>my computer, and I was able to connect. Thats it. I basically had a secure
>pipe from my home to the firewall. So my question is; once I connect to the
>firewall, how to I access the server so I can send/retrieve data? Thats all
>I want to do is file sharing. I feel as if I need to setup some stuff on the
>server but what? Please bare with me as I am not savy on firewalls yet. I've
>tried asking sonicall support for help on setting up the server side, but
>they will only deal with their side of things. Again, I'm running SBS2000
>with ISA running. If you can shed some light on what I need to do, I will be
>forever greatfull. Thanks in advance.
>
>Mike G
>
>
>"James" <jblackburn@freedomcorp.com> wrote in message
>news:fbca01c43e7a$65c3cec0$a501280a@phx.gbl...
>> Mike,
>>
>> I currently use SonicWALL SOHO3 with SBS2000. I am
>> trying to understand what you are asking and what Roger is
>> telling you and I am confused.
>> I used to have SOHO2 running on a NT 4.0 server then
>> we upgraded to a new server (SBS2000) w/SOHO2. With
>> SonicWALL's assistance the transition from SOHO2 to SOHO3
>> was very easy.
>> We use the SOHO3 for VPN access & firewall. Even
>> thought about using it for virus protection, but we went a
>> different route. The SOHO3 is easy to configure and use.
>> So my questions to you are: What are you exactly
>> looking to do? What issues/problems are you having?
>>
>> James
>>
>> >-----Original Message-----
>> >Hey Roger, thanks for the reply! Allow me to give you the
>> low down. I'm
>> >trying to translate what you are saying, but please bare
>> with me as I am
>> >very new to VPN and the way sonicwall, not to mention
>> firewalls in general
>> >work.
>> >Okay, I'm not trying to log in to my local workstation
>> with my user and
>> >password. Actually, I didn't even think that was
>> possible. All I'm trying to
>> >do is access data on the server. Now, when you say, "If
>> not set it so you
>> >are and then try pinging the servers", could you please
>> explain how I set
>> >it? Also, you say, "go into you hosts file and add your
>> server name and the
>> >IP of the External NIC on the Server and then try it and
>> see if you get a
>> >response.", where would I find the host file?
>> >
>> >Again, please forgive me as I am very new to this. If you
>> could kindly
>> >explaine my questions above in more detail, that would
>> great. I really
>> >appreciate it.
>> >thanks,
>> >Mike G
>> >
>> >
>> >"Roger Crawford" <rcrawford@nospam.scci.com> wrote in
>> message
>> >news:%23yc9bFVPEHA.1048@tk2msftngp13.phx.gbl...
>> >> Are you logging into your local workstation as the same
>> user name as you
>> >> would at work? If not set it so you are and then try
>> pinging the servers
>> >> External IP through the VPN and then by name and if you
>> don't get a
>> >response
>> >> by name go into you hosts file and add your server name
>> and the IP of the
>> >> External NIC on the Server and then try it and see if
>> you get a response.
>> >If
>> >> you do go to run and do \\servername\sharedfoldername
>> and see if you
>> >connect
>> >> and are able to browse that folder. Also you can use
>> Outlook on your home
>> >PC
>> >> to connect to your exchange at work through this. I
>> ahve a couple of sites
>> >> where they are doing this now with no issues. They run
>> TS through this and
>> >> also a program that they use in there office.
>> >>
>> >> Roger Crawford
>> >> HTS
>> >>
>> >>
>> >> "Mike" <tech@phase1mw.com> wrote in message
>> >> news:ukmSDTSPEHA.3124@TK2MSFTNGP12.phx.gbl...
>> >> > Hello All,
>> >> >
>> >> > Thanks again to Marina Roos SBS-MVP for helping me
>> figure out my
>> >exchange
>> >> > 2000 dilema.
>> >> >
>> >> > We recently purchased sonicwall firewall SOHO3 10
>> user w/ 5 VPN
>> >> connections.
>> >> >
>> >> > Here is scenerio, I'm at home using DSL connection. I
>> install Sonicwalls
>> >> VPN
>> >> > software, input user, password, IP, etc., and presto!
>> I now have a
>> >secure
>> >> > pipe from my home to the sonicwall firewall at
>> work...thats it. I can
>> >get
>> >> to
>> >> > my firewall, woopty doo. What now? How do I get files
>> off of the server?
>> >> >
>> >> > My objective is for regular users, not just admin to
>> be able to access
>> >> files
>> >> > from home. I'm not looking to do remote desktop, just
>> something like
>> >ftp,
>> >> > very simple.
>> >> >
>> >> > I'm not sure what to do or where to start, I've heard
>> that NATing may be
>> >a
>> >> > problem because its not incorporated into
>> server2000's TCP/IP stack. I
>> >> need
>> >> > to see this through. I do have tech support for the
>> Sonicwall firewall,
>> >> but
>> >> > it seems like they will only help me get from home to
>> the firewall. Any
>> >> help
>> >> > would be most appreciative.
>> >> > thanks,
>> >> > Mike
>> >> >
>> >> >
>> >>
>> >>
>> >
>> >
>> >.
>> >
>

Jim B. SBS MVP
remove the mvp to send email



Relevant Pages

  • Re: SBS VPN setup?
    ... And if you have a hardware firewall you haven't flashed in years they just got in through a exploit. ... SBS plugs into a switch with the other computers and the switch is plugged into a firewall appliance with 2-nics. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ... > learn and test the RWW solution before deploying it. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS VPN setup?
    ... The 2-nic configuration is used when the SBS server will *also* act as your network's firewall. ... You purchase 2k3 PREMIUM and that comes with ISA to handle the firewall duties. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet on nodes
    ... disabled state (someone please confirm this for SBS Standard, ... firewall service should result in 'ISA lockdown'. ... print' from both the server and a WS. ... Was not able to connect to the internet on the WS. ...
    (microsoft.public.windows.server.sbs)
  • Re: ceicw failure on e-mail config
    ... Merv Porter [SBS MVP] ... Ethernet adapter Server Local Area Connection: ... Call to Reading the firewall selection returned ok. ... Firewall Rule: SBS DHCP Client ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall on a single NIC SBS2003 Standard edition
    ... Frank McCallister SBS MVP ... > " Well, if you're wanting to run the firewall on a single NIC, you aren't ... Don't ask the server to do *everything*, ... > internet traffic from the workstations don't have to go through the SBS. ...
    (microsoft.public.windows.server.sbs)