RE: Complete VPN Fundamentals and VPN Router RV042

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

anonymous_at_discussions.microsoft.com
Date: 09/07/04


Date: Tue, 7 Sep 2004 02:36:02 -0700

Thanks Jason:

After repeated calls to Linksys support on your point of
having the vpnrouter of NETB set with VPN
passthrough=DISABLE for the reasons you stated, Linksys
insisted that I should have it set on ENABLE. But could
not give a reason. Later, after looking at manuals of
other routers I found that the VPNrouters have at least
two components. One component is a firewall. If you set
VPN DISABLE you would be setting the vpnrouter firewall
to stop VPN traffic and all VPN would fail. So as a rule
then if you want VPN set all routers to VPN
passthrough=ENABLE. This seems to be correct. Factory
default for this VPN passthrough setting is ENABLE. But
this is the first step only...

 
>-----Original Message-----
>Hi there Lewis,
>
>You've got a whole bundle of questions going here - and
we really need to
>get back to basics before working through that lot!
>
>First things first, whilst you may already know this,
I'll cover anyway, you
>can always skip over - A VPN should be seen as a pipe
which runs from one
>endpoint to another and the endpoints are very
important. The internet
>routers you have, I think, should be able to manage the
VPN without your XP
>system getting involved - and because of the way that
the Linksys devices
>handle VPN, this is often best.
>
>If you are configuring the NETB router as an endpoint,
then you should not
>need any further configuration at the server end. You
will need to configure
>the router at NETB to NOT be VPN passthrough, but to act
as a VPN endpoint.
>
>There's the Linksys article here:
>http://linksys.custhelp.com/cgi-
bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=207
>
>which covers XP/W2k config and the site:
>
>http://routerworld.dyndns.org/
>
>has some excellent configs which cover much of your
requirements - including
>MS -> Linksys.
>
>I'm sorry I can't give full settings etc here, but hope
that this gets you
>on the right track.
>
>Reply to the post if you need more info.
>
>Regards,
>
>Jason
>
>
>
>
>
>
>
>There ate
>
>
>"Lewis Giana" wrote:
>
>>
>> So far I have a laptop at home, and I want to connect
to
>> a server in another house and the situation looks like
>> this:
>>
>> laptop1---Router1--Internet--VPNRouter---Server
>>
>> or equivalently:
>>
>> NETA---Router1--Internet--VPNRouter---NETB
>>
>> Router1 is Linksys BEFW11S4
>> The VPNRouter is Linksys RV042
>> www.linksys.com Their manual is almost worthless.
>> Their support inane.
>>
>> The ROUTERS HAVE TOTALLY DIFFERENT INTERNET ipS.
>> THAT IS, ONE HAS 200.3.34.4, THE OTHER 127.6.32.3
>> Each provides NAT and Private ips, one to NETA and the
>> other router to NETB respectively.
>>
>>
>> Laptop has XP Professional
>> Laptop and server have PRIVATE IPs
>>
>> Server is a DOMAN controller. Has Window Server 2003
and
>> VPN is NOT configured, since the VPNrouter will do the
>> VPN job. Is this thinking correct?
>>
>> To configure this WHY do we do the following steps? In
>> other words what are we doing? Can someone explain?
One
>> short paragaph should do wonders.
>>
>> 1. On the laptop with Windos XP I create IPsec Policy
>> FROM the laptop to the VPNrouter. DO I need
another
>> security policy from the VPNRouter to the laptop?
>>
>> 2. On the laptop Create two Filter Lists for the
>> connection from the laptop to the VPN router and
another
>> filter list from the connection from the VPN router to
>> the laptop.
>>
>> 3. On the Laptop create security rules for the filter
>> lists created on step 2. This is where encription and
>> authentication methods are defined.
>>
>> 4. On the laptop create two tunnels for each Filter
List
>> on step 2.
>>
>> 5. Assign the security policy create on step 1.
>>
>> 6. The mising step. WHEN AND HOW THE PREVIOUS STEPS
are
>> used or activated to create the VPN?
>>
>>
>> 7. The router for NEtA has vpn passthrough. Is this
>> correct?
>>
>> 8. The VPNrouter for NETB should it have vpn
passthrough
>> DISABLED? This router has VPN capabilities and can
>> establish 30 tunnels they say.
>>
>> 9. DO I need to configure the server on NETB just like
>> the laptop? In other words perform steps 1 through 6
on
>> the server?
>>
>> 10. When all is working properly and the laptop joins
>> NETB throgh VPN. what happens? Does one see a small
>> window to login into the server? or does the VPN
router
>> does the authentication and how? Or nothing should
happen
>> until one accesses shares on the server?
>>
>>
>>
>.
>



Relevant Pages

  • Re: Complete VPN Fundamentals and VPN Router RV042
    ... VPN over NAT. ... to the VPN router seems in their view hopeless. ... >> a server in another house and the situation looks like ... >> Laptop has XP Professional ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Novice trying to setup VPN on XP with Linkys Router
    ... my office vpn on my laptop. ... I have even tried to delete the connection and adding it ... The modem is connected to a wireless router. ... home) and I want to use the Windows XP VPN feature. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Remote client access to srv behind router
    ... The VPN endpoint is the router. ... At this point I've setup the laptop with a VPN connection and I'm able to ...
    (microsoft.public.windows.server.networking)
  • Re: Complete VPN Fundamentals and VPN Router RV042
    ... > other router to NETB respectively. ... > Laptop has XP Professional ... > Laptop and server have PRIVATE IPs ... > VPN job. ...
    (microsoft.public.windowsxp.work_remotely)
  • RE: Complete VPN Fundamentals and VPN Router RV042
    ... routers you have, I think, should be able to manage the VPN without your XP ... need any further configuration at the server end. ... the router at NETB to NOT be VPN passthrough, but to act as a VPN endpoint. ... > Laptop has XP Professional ...
    (microsoft.public.windowsxp.work_remotely)