Re: Connection sharing on demand
- From: "Kurt" <lorentzenkurt@xxxxxxxxxxxxxxxxxx>
- Date: Sat, 8 Apr 2006 11:50:39 -0700
I think you could do it with a second computer.
1) Put the ICS box (private side) on a different subnet than the LAN - ICS
defaults to 192.168.0.1, but you can change it without problems.
2) Put a Windows 2000 box with a NIC on each subnet (one on the LAN subnet
and the other on the ICS box's subnet.
3) Set up the W2K box to accept VPN connections. The default client setup is
to use the default gateway on the remote network I believe - but double
check that.
4) Create accounts on the VPN server for users you want to have Internet
access. I believe W2K allow either 5 or 10 Simultaneous VPN connections, but
check me on that, too. If you need more, you'll need a Server OS or a Linux
solution or something (check out Cyberguard's free PPTP VPN Server for
Linux). You could also use the VPN server box to hand out DHCP addresses on
the local LAN if you use a server OS or Linux.
When users start their computers, they'll get a DHCP address. When they need
Internet access they'll start the VPN (desktop shortcut). They'll need to
enter their username/password to connect. They'll use the default gateway on
the remote network (which would be the ICS box) to connect to the Internet.
Be sure to use a static pool for VPN connections and supply a default
gateway.
Should work!
....kurt
"Luiz Borges" <luiz_borges@xxxxxxx> wrote in message
news:1144515871.684711.241340@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,
I have a network in my office with about 20 desktops running XP Pro and
some of them running Win98, they all have internet connection through
ICS on an old PC running Win98.
Now, I need a way to restrict the internet connection without restring
LAN access, so I'm thinking in make that old PC run Win2000 (as I don't
think Win98 will handle what I need) to run a DHCP server to provide
basic LAN connectivity, AND providing some sort of dial-up-like
connection to internet. So any user who have a logon to connect on the
internet can sit in any of the terminals and just dial-in to get
connected.
I think that can be done with some sort of "reversed" VPN (you connect
to get out, and not in), but that seems kind lame. Maybe NAT is the
answer, but I have no idea on how to implement that.
How can that be done?
Thanks in advance,
Luiz Borges
.
- Follow-Ups:
- Re: Connection sharing on demand
- From: Luiz Borges
- Re: Connection sharing on demand
- References:
- Connection sharing on demand
- From: Luiz Borges
- Connection sharing on demand
- Prev by Date: Re: ICS not 100%
- Next by Date: router refuses my connection
- Previous by thread: Connection sharing on demand
- Next by thread: Re: Connection sharing on demand
- Index(es):
Relevant Pages
|
