Re: New VPN Setup

From: FE-FR (fe)
Date: 06/07/04


Date: Mon, 7 Jun 2004 23:47:34 +0200

Hi,

Q1 : you need to open TCP port 1723 and Protocol 47 (GRE) ... which is not
TCP port 47. GRE is at the same level as TCP not over.

Q2:You can TSE one of you DC and add the user (or remove him) with the local
MMC. In this case your policy will only authorize TSE if you are member of
'remote VPN administrators' AD group... or use the MMC installed on your
machine, but I think that you will need to open RPC.

With Windows 2003 you cannot say 'authorize RPC' ... there is no application
filter (ISA 2004 hase these kind of application filter) so you will need to
open TCP 135 and highports.

Hope it helps.

FE

"Ola" <anonymous@discussions.microsoft.com> wrote in message
news:190d901c44ca7$70d393a0$a301280a@phx.gbl...
> Hello all,
>
> I am trying to setup a VPN for a small company of 10. I
> also have the issue of high turnover of employees in this
> small company because income is commission based. So I am
> trying to achieve two different things.
>
> 1. VPN access to the employees - They need access to
> network data while on the road sometimes. I have never
> setup a VPN before, however, I have opened ports 1723 and
> 47 on my router to allow PPTP to my server. So other than
> running RAS on the server and running VPN Client on the
> workstations, what else do I need. You should also note
> that the company is using a fractional T1 line, so there
> is no phone number to dial into. I have a netopia R9100-T
> Router with VPN capability.
>
> 2. I need to be able to add and delete users remotely. If
> I am able to get to the server by resolving question 1
> above, would I be able to accomplish question 2, or do I
> need more to be able to use Active Directory Users and
> Computers?
>
> Thanks in advance
>
> Ola
>



Relevant Pages

  • Re: Redirect problems to remote client
    ... please kindly note that the TCP port 139 is used for NetBIOS ... computer and the domain controller to authenticate users and services. ... Netlogon Application protocol Protocol Ports ...
    (microsoft.public.windows.server.sbs)
  • RE: Port forwarding
    ... If you only use RWW and don't require the RWW/RDP ... TS requests through a firewall on TCP port 4125. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: New VPN Setup
    ... What are TSE and MMC? ... I have Port 1723 forwarded to my server from a linksys ... do I get to them through the VPN connection as well ...
    (microsoft.public.win2000.ras_routing)
  • Re: Speed Mismatch?!?
    ... Server listening on TCP port 5001 ... Client connecting to 192.168.67.249, TCP port 5001 ... collisions" on the gbit interface during the slow transfers. ... Use the counters to determine if you have a duplex missmatch. ...
    (comp.dcom.sys.cisco)
  • Re: HELP: NFS mount hangs when attempting to copy file
    ... A lot of these VPN solutions are unfriendly to MTU ... Sun uses TCP by default when mounting NFS ... that's breaking the PMTU discovery if you can (usually it's too ...
    (Linux-Kernel)

Loading