Re: Setting up Windows VPN

From: xfile (cou-cou_at_remove.nospam.com)
Date: 12/28/04


Date: Tue, 28 Dec 2004 08:42:49 +0800

Hi:

Thanks for the help on the link.

All articles I read including those from MS did not mention about to set up
a host first (needless to say to uncheck default devices listed which do not
apply for using Internet) and certainly it won't work with a host setup :)

So now, I am done at least for the internal part of testing. I can
successfully use VPN connection within the home network.

But I still have three questions and hope someone can help:

(1) Can a machine (XP Pro) to be set up as both the host and client?

(2) What to do after the connection have been established? The purpose is
to access folders and files from a remote location. So assuming I can
actually establish VPN connection from a remote location (to be tested),
shall I just open My Network Places, and click the host's shared folders, as
I would do within the domain?

(3) Is there a way that I can test or check for the internal VPN connection
is done as if it was an external one?

Thanks for the kind sharing.

"Robert L [MS-MVP]" <noreply@hotmail.com>
???????:uf0n1RC7EHA.3708@TK2MSFTNGP14.phx.gbl...
>I would it internally. if it works, focus on the router.
>
> --
> For more and other information, go to http://www.ChicagoTech.net
>
> Don't send e-mail or reply to me except you need consulting services.
> Posting on MS newsgroup will benefit all readers and you may get more
> help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
> http://www.ChicagoTech.net
> Networking Solutions, http://www.chicagotech.net/networksolutions.htm
> VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
> VPN Process and Error Analysis,
> http://www.chicagotech.net/VPN%20process.htm
> VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
> This posting is provided "AS IS" with no warranties.
> "xfile" <cou-cou@remove.nospam.com> wrote in message
> news:eJJv1B86EHA.3908@TK2MSFTNGP12.phx.gbl...
>> Hi:
>>
>> Thanks if anyone can help me to set up a home VPN network trough Internet
>> DSL connection for my Windows XP pro systems. The ideal way is to let
>> portables access desktop through Internet VPN when I am not at the home
>> environment.
>>
>> Here is my environment:
>>
>> (1) 3 Windows Pro (all with SP2 and latest updates, NIS 2004 Pro), one is
>> Desktop and two are portables.
>>
>> (2) All joined a local private domain (PC server, but off most of time,
>> and do not wish to set up VPN through this, since it is off most of time)
>>
>> (3) Internet connection: DSL with Buffalo G54 wireless router which also
>> has 4 LAN ports. The desktop is connected to LAN port, and portables are
>> using wireless connection. No internet connection sharing through any
>> system.
>>
>> (4) Internet connection (2): ISP has assigned a static IP address. DHCP
>> server and default gateway are performed by router. DNS server: Primary
>> set to local domain server, and secondary is carried by the router.
>>
>> Basically, the router serves as the primary gateway and controller for
>> all Internet traffic.
>>
>> What I have done:
>>
>> (1) I used Network Connections to create a VPN connection through the
>> wizard, and got the famous 800 error codes,
>>
>> (2) I have consulted with router manufacturer to properly configure
>> router, including firmware update and adding an NAT table for opening the
>> port: TCP 1723
>>
>> (3) I have consulted with Symantec technical support about how to opening
>> a port for an application but I don't know which executable files, or
>> modules Windows will use for VPN connection, so I have not done this yet.
>>
>>
>> What I don't know:
>>
>> According to MS KB articles, 800 error message can be caused by the
>> following...
>>
>> If you use a personal firewall or a broadband router, or if there are
>> routers or firewalls between the VPN client and the VPN server, the
>> following ports and protocol must be enabled for PPTP on all firewalls
>> and
>> routers that are between the VPN client and the VPN server:
>>
>> Client ports Server port Protocol
>> 1024-65535/TCP 1723/TCP PPTP
>>
>> Additionally, you must enable IP PROTOCOL 47 (GRE).
>> ---------------------------------------------------------------
>>
>> (1) Do I have a VPN client/server relationship in this case? I wish the
>> portable can access information stored at the desktop when I was away
>> from home. Does that make the desktop server, and portable clients?
>>
>>
>> (2) I don't understand this at all, and how do I do that?
>>
>> ...........following ports and protocol must be enabled for PPTP on all
>> firewalls and
>> routers that are between the VPN client and the VPN server:
>>
>> Client ports Server port Protocol
>> 1024-65535/TCP 1723/TCP PPTP
>> ---------
>> I can see HTTP port list on the NIS 2004 firewall setup,
>> is this where I add those ports? Currently, there are 80, 81, and...
>>
>> (2) 1024-65535: What does this mean? Adding port from 1024 to 65535
>> or...??
>>
>> (3) Protocol PPTP and IP Protocol 47 (GRE): How do I add or enable them?
>>
>> Thanks for your kind help.
>>
>>
>>
>
>



Relevant Pages

  • Re: Using Remote Desktop From an SBS Domain
    ... when you tried to RDP while attached directly to a port on your router? ... Internet to initiate an IP conversation with your computer. ... This situation is different than if you ran your own NAT connection sharing ...
    (microsoft.public.windows.server.sbs)
  • RE: Missing web services configuration pane
    ... Please contact the ISP to confirm what the exact connection type is. ... If it's a VPN type, you should have the VPN server side address. ... 825763 How to configure Internet access in Windows Small Business Server ... 241252 VPN Tunnels - PPTP Protocol Packet Description and Use ...
    (microsoft.public.windows.server.sbs)
  • Re: Using Remote Desktop From an SBS Domain
    ... I don't have much experience with this type of Internet access (at least not ... allows all "outbound" traffic from your private network to flow freely to ... UDP port (synchronize time with an external Network Time ... Hopefully next week I can attempt a connection while my ISP watches the ...
    (microsoft.public.windows.server.sbs)
  • Re: Yet another thread on the legality of port scanning
    ... Yet another thread on the legality of port scanning ... >> information transfer on the internet. ... >> is an acceptable connection in the absence of explicit permission? ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)
  • Re: 45 days STUCK LIKE CHUCK. DNS / Mx record cant recieve emails
    ... cable from the Comcast router and plug it into that machine, ... Yes router is connected directly into the internet nic / other nic ... You can test the connection from within the LAN, ... I'm thinking that leaves the NAT device blocking port 25. ...
    (microsoft.public.windows.server.sbs)