Newbie: VPN Configuration - Server behind NAT

From: Camilo Andres Arango (camilo_at_tallerinternet.com)
Date: 04/07/04 

Date: 6 Apr 2004 21:54:42 -0700

Hello. I have a small SoHo network with DSL Internet access. My DSL
router (GreatSpeed GS-B240G) provides NAT functionality, and all
internal machines use it as the gateway. Router, server and
workstations are all conected to a switch.

I have a Windows 2000 AS Server on my network, which I'm trying to
configure as a VPN Server. So far, I have been able to set up the
server and properly connect from a Windows 2000 client inside my LAN
network. I have configured my VPN to run under PPTP protocol. No L2TP
(yet).

The problem comes when trying to connect from the Internet. I have
setup a NAT rule on my DSL router (RDR flavor rule) to properly map
all incoming traffic by all protocols/ports to the VPN server machine.
In other words, Im exposing this server to the internet.
So far I have tested from outside: PC Anywhere, FTP, SMTP, HTTP, SMTP
and everything works fine.

However, when connecting from the Internet, clients can't
authenticate. I always get an error when client is validating
password. I have tried all authentication protocols, including PAP,
with no success.

What could I be doing wrong?
Any help will be greatly appreciated!!

Best regards

Camilo Arango

Relevant Pages

  • Re: Urgent! New router and big disaster
    ... The SBS DNS server, running on ... its IP it means that your problem is now DNS. ... forward ports to it reliably in the router. ... I should have been more clear about internet connection.. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... I checked the binding order and the Server Local area connection is at the top. ... I should have been more clear about internet connection.. ... I wonder if I may have missed a firewall setting on the router as well. ...
    (microsoft.public.windows.server.sbs)
  • RE: Small network with lots of features, questions
    ... Your network sounds overly complicated to me. ... to get to the internet. ... To do that, without using your server as a router, you need ...
    (microsoft.public.windows.server.networking)
  • Re: Urgent! New router and big disaster
    ... I checked the router, I am running a laptop off of it so I can post. ... Les Connor [SBS Community Member - SBS MVP] ... make sure the DHCP Client Service is running on the server. ... First Page of the Internet Connection Wizard, ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... OK, yes, I've struck a router which would only allow DHCP clients access to ... no internet connection from the server. ...
    (microsoft.public.windows.server.sbs)
Loading