Re: can xp act as server for vpn connection

From: Jeffrey Randow (MVP) (jeffreyr-support_at_remotenetworktechnology.com)
Date: 03/30/04


Date: Mon, 29 Mar 2004 20:40:38 -0600

IPSEC L2TP connections won't work behind a NAT firewall without
NAT-T... Unfortunately, NAT-T server side functionality isn't being
included in Windows XP (grr...)... Thus, the only way to do this is
to (1) - get a hardware IPSEC firewall router that supports NAT-T, (2)
run Windows 2003 Server... :(

Hopefully I'll learn more about this next week... :)

Jeffrey Randow (Windows Net. & Smart Display MVP)
jeffreyr-support@remotenetworktechnology.com

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

On Sun, 28 Mar 2004 20:06:10 -0500, "Bill Sanderson"
<Bill_Sanderson@msn.com.plugh.org> wrote:

>I'm afraid I have zero experience with IPSEC--none of my clients has
>sufficient need to pay the extra for fixed IP addresses, so I haven't spent
>the time to learn about the issues involved.
>
>Jeffrey?......
>
>Here's a clear reference to the limitations on IPSEC in XP Home:
>
>http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/windowsxp/home/using/productdoc/en/sag_IPSec_Ov9.asp
>
>If I am reading this correctly, it appears you may be able to do what you
>are trying to do if you can find the correct tool to set local IPSec policy
>on the XP Home machine.
>
>This reference would seem to be what's needed:
>
>http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/windowsxp/home/using/productdoc/en/ipsec_start_snap-in.asp
>
>but I haven't got access to an XP Home install to test whether the docs are,
>in fact, correct--they sometimes are not.
>
>Here's a doc for troubleshooting:
>http://support.microsoft.com/default.aspx?scid=kb;en-us;314831
>
>
>"Mark" <anonymous@discussions.microsoft.com> wrote in message
>news:47A9BA72-3A3E-484F-B71A-1D206B73970F@microsoft.com...
>>I am trying to make an ipsec vpn connection......have a windows xp home as
>>the client, and a xp pro as the server......I am having problems with
>>security permisson (secpol.msc) in the home edition. I cant' find where
>>you can set the security policy on the client connection.
>>
>> what is happening is that the security permissons are set up on the sever
>> side, but when the computer is behind the firewall it can't connect
>> because it can't see the security policies, but if i put the server in the
>> dmz zone then it connects right away.
>>
>> what i need is a way to set the security policies on the client side so
>> that i can tunnel to the sever behind the firewall
>



Relevant Pages

  • Re: Guide to secure installtion of IIS 5
    ... don't forget a well-configured firewall. ... Do not put the computer onto the network or the Internet until after the ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.inetserver.iis.security)
  • Re: The Myth of the secure Mac
    ... You are screwed only if you use Outlook. ... >> 1) You fail to apply necessary recommended security patches after ... >> 3) In the case of a firewall, ... >> attached as common Windows files) Make sure this Junk Mail is moved to ...
    (comp.sys.mac.advocacy)
  • Re: Antivirus Programs
    ... Shenan-you wrote an excellent security book. ... >> May I install Norton AntiVirus and McAfee Security on my ... > Windows is not the only product you likely have on your PC. ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.newusers)
  • Re: Microsoft Windows Network & Web Client Network - somebody connected to my computer?
    ... I use Windows XP. ... Doing the best I can at absorbing the necessary information about security. ... > UPDATES and PATCHES ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Messenger Service security breach
    ... > The attached graphic is an example of a Windows security ... > We've put off installation of a firewall appliance between ... > could plug the security holes on individual computers. ... downloading and installing MyNetWatchman or Dshield. ...
    (microsoft.public.security)