Re: Routing to remote office...

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Imran Aziz (imran_at_bindweb.com)
Date: 11/17/04 

Date: Wed, 17 Nov 2004 16:16:48 -0000

Thank you so very much for your response. Unfortunately it does not work by
letting port 1723 through the NAT setup.
The client tries to connect and after entering the login details its hangs
for ever on the username password authentication, and does not work. How can
one enable GRE protocol through the NAT setup ? NAT only allows TCP and UDP.
Any suggestions please ?
Imran.

"David Elders" <david_elders@hotmail.com.nospam> wrote in message
news:eCTb3wLzEHA.2788@TK2MSFTNGP15.phx.gbl...
> Assuming you're using PPTP to connect your VPN with, you need to forward
> TCP port 1723 and GRE protocol 47 from your Router to the external NIC on
> the SBS box. Usually this is simply done via port forwarding within the
> Router config. In many cases, you don't have to 'do' anything specifically
> with regards forwarding the GRE protocol - many routers just do this as
> standard...
>
> Regards,
>
>
>
> David
>
>
>
> "Imran Aziz" <imran@bindweb.com> wrote in message
> news:OYlU2TLzEHA.1524@TK2MSFTNGP09.phx.gbl...
>> Hi this is a question rather then an answer, since you mentioned that you
>> have got your VPN setup running ! I am trying to setup a VPN. I
>> configured the VPN server and am able to connect to it from the intranet
>> clients, But I am not able to connect to the VPN from the internet .
>> SBS servers external interface is connected to a router with NAT enabled
>> on it, and the internal interface has ISA firewall configured.
>> What settings do I need to do at the router and ISA firewall to allow the
>> PPTP traffic to go through and get VPN working? I opened the mapping for
>> port 1723 at the NAT and internet clients when connecting to it now do
>> get a user name password confirmation box, but nothing happens after
>> that, and clients keep on waiting for the user name password
>> authentication to go through.
>>
>> Thanks a lot.
>> Imran.
>>
>> "David Elders" <david_elders@hotmail.com.nospam> wrote in message
>> news:OxHYFGLzEHA.1192@tk2msftngp13.phx.gbl...
>>> Hi all,
>>>
>>> Think we have this almost there but need a wee hand getting the job
>>> finished...
>>>
>>> SBS2K @ Site 1
>>> 2 x NIC
>>> Broadband Router connecting to External NIC and Cable Modem
>>> Remote users connect using VPN over Internet, terminating using RRAS on
>>> SBS
>>>
>>> SBS2K @ Site 2
>>> Same set-up
>>>
>>> We have also configured a couple of Vigor routers on the Internal LAN
>>> ranges at either end, with the external interfaces of both connecting to
>>> the internal side of the respective broadband routers. These Vigors are
>>> configured for a permanent VPN connection between them, which is working
>>> fine. We have configured the respective SBS servers to also have a
>>> permanent site-to-site VPN connection [simply routed across the
>>> 'existing' permanent Vigor > Vigor VPN connection]. Again, this is
>>> working fine - each server can see the other and browse its files etc.
>>>
>>> What we cannot seem to suss out is how to get LAN clients at Site 1 to
>>> be able to browse the network/SBS server at Site 2, without manually
>>> creating a VPN connection from the client to the Site 2 SBS box.
>>>
>>> Get the feeling that we're missing something pretty basic in terms of
>>> the IP routing side but can't get my head around it!
>>>
>>> Anyone got any ideas?
>>>
>>> Thanks,
>>>
>>>
>>>
>>> David
>>>
>>
>>
>
>

Relevant Pages

  • Re: IPSEC VPN NAT
    ... ISA/VPN and try to reproduce the setup, ... There are a number of problems with using IPsec over NAT devices. ... All VPN clients must be using the IPsec NAT-T VPN client. ...
    (microsoft.public.isaserver)
  • Re: IPSEC VPN NAT
    ... So I cannot pre-configure the Clients for differnet ... ISA/VPN and try to reproduce the setup, ... NAT Traversal ... There are a number of problems with using IPsec over NAT devices. ...
    (microsoft.public.isaserver)
  • Re: L2TP over IPsec VPN and nat-t
    ... In addition to suggestions about configuring client for NAT-T the NAT ... The VPN uses IPsec certificates and this all works ... > These remote clients are connecting a Netscreen 25 for their VPN tunnels. ...
    (microsoft.public.security)
  • Re: DSL internet connection via server - routing
    ... You will run into problems with double NAT only with some multiplayer games and some older VoIP clients, or with some VPN clients where the client would be in your LAN and trying to VPN to a remote VPN endpoint with an outdated configuration. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN & NAT
    ... > working through a nat setup. ... installed will block vpn traffic. ... I blank out all my rules with iptables and then throw in the one masqing rule ...
    (Debian-User)