Re: How to use a router provided VPN?

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 02/23/04


Date: Mon, 23 Feb 2004 09:34:46 -0500

anonymous@discussions.microsoft.com wrote:
> Marty,
> If you're setting up a VPN then they both need to be in
> the same private ip octet, eg. 192.168.1.1 and
> 192.168.1.2 also the subnets should be the same.

Actually, if both networks are using the same IP network, VPN won't work
AFAIK.

> Personally I always put routers from 1-10 in vpns,
> workstations in the 100-200's and printers in the 50's.
>
> Mark
>
>
>> -----Original Message-----
>> I've got a T1, a D-Link DI-804HV VPN firewall/router, a
>> peer-to-peer network and an XP Pro machine that acts as a
>> workstation and our workgroup server at the office. At
>> the house, I've got another XP Pro, and a WIN98 SE machine
>> on another peer-to-peer network behind another DI- 804HV.
>> The DI-804HV can provide encrypted VPN tunnels. I've got
>> a tunnel defined, complete with IKE and IPSec
> proposals.
>> D-Link says I'm finished when I can ping a machine on the
>> opposite subnet, which I can do. The Router logs also
>> indicate that the tunnel is up.
>>
>> So how do I use this? The goal is to be able to run multi-
>> user software applications on the home computers using the
>> data that is in the XP Pro box at the office, just like we
>> would from other peer-to-peer machines at the office.
>>
>> Now I'm assuming that since the encryption is being done
>> by the firewall, and I can already ping the far end subnet
>> machines, this is not a standard Windows type VPN dialled
>> connection, which does it's own encryption. I have no
>> idea how to go about getting Windows to use this
> tunnel.
>> I've tried making the workgroup names the same on both
>> ends and browsing. No luck. How do I map a drive, or
>> otherwise enable a machine at one end to use data at the
>> other end? The subnets do not have overlapping IP
>> addresses. One starts with 192.168.0.1, the other is
>> 192.168.1.1. Will the machines have to have common subnet
>> addresses?
>>
>> TIA,
>> Marty
>> .



Relevant Pages

  • Re: RV042 - Does anyone understand it? Documentation?
    ... if one is using an RV042 for VPN, then what affect does the routing table have on the VPN packets? ... When the packet is received at the other end of the tunnel, it will still be destined for a "foreign" private subnet. ... In other words the range of IP's you are trying to reach and the range of IP's the traffic is coming from MUST be included in the subnets for the encrypted tunnel. ...
    (comp.dcom.vpn)
  • Re: Setting routing to link 2 sites by VPN
    ... but what is the two sites were on a different subnet? ... tunnel would be traffic addressed to the private IPs of machines at the "other" site. ... Only the private traffic for the "other" site will be tunnelled. ... E mail & RDP traffic will be sent / recieved over the vpn. ...
    (microsoft.public.windows.server.networking)
  • Re: Problems w. VPN connection over T-1
    ... This looks like both ends of the tunnel share the same subnet. ... Can you use hardware routers to do the VPN? ... >>> I just setup two networks (one in Cali and the other in Mass). ...
    (microsoft.public.exchange.connectivity)
  • How to use a router provided VPN?
    ... >The DI-804HV can provide encrypted VPN tunnels. ... >a tunnel defined, ... >opposite subnet, which I can do. ... which does it's own encryption. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: VPN and Routing in one box
    ... Any suggestions for a simple router that will do this? ... Packets originate in Subnet 1, ... The VPN is the first hop. ... should be sent through the VPN gateway at 192.168.2.0 and you ...
    (comp.dcom.vpn)