Re: VPN Problem

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Roger (a_at_b.com)
Date: 10/03/04 

Date: Sun, 03 Oct 2004 22:26:28 GMT

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:u8J8d0MqEHA.3800@TK2MSFTNGP14.phx.gbl...
> > Home Network: Consists of a desktop and a laptop, both running XP
> > Home, cable broadband access and a wireless router. The laptop has a
> > wireless connection. The workgroup name is "Workgroup". The router's
> > firewall is disabled.
>
> Why? I'd leave it enabled....you can initiate a VPN connection behind a
> router with no inbound ports open at all. Of course, since you're using
> wireless, you also need to secure that - even 128-bit WEP is better than
> nothing. But I digress...

I use a Belkin router at home and its firewall interferes with email and
even sometimes disconnects from the internet if I enable it. Therefore, I
disabled it and installed and enabled NIS 2004 on both the home desktop and
laptop. As for wireless, yes, WEP 128-bit is configured and enabled.

> >
> > Office Network: Consists of 4 desktops - 2 running ME, 1 XP home and
> > 1 XP Professional, DSL broadband access and all computers connected
> > via wired ethernet. The DSL modem cum access point is connected to a
> > ethernet switch as are all the computers. The workgroup name is again
> > "Workgroup". The firewall of the DSL modem cum access point is set to
> > allow PPTP connections to the computer with XP Professional.
>
> Meaning:
> TCP port 1723
> Protocol 47 ( GRE )
> ?
I honestly don't know which port. The office router's interface provides a
selection (from a listing of items to allow) for "PPTP Server" and
associates the selection to a specified computer on the LAN. That is how I
set it.
> >
>
> What did you open up in NIS for inbound ports?

In NIS 2004 on computer B, I set up a rule to open port 1723-this port was
in the preset list of ports. I could not find any entry for Protocol 47 and
not knowing what to do about it, I left it alone. The rule did not work, so
I disabled NIS completely just to see if the connection worked without the
firewall. It did.

>
> What IP networks are you on at home and at work? For VPN to work, you need
> to have two different networks - can't connect if you are using, for
example
> say, 192.168.0.0 in both places.

Home network: IP addresses behind the router are 192.168.x.x. Cable ISP is
Adelphia
Office network: IP addresses behind the router are 172.16.1.38. DSL ISP is
SBC.
The outgoing connection is set to connect to the Internet IP address of the
office network which in my case comes from SBC.

>
> Presuming that isn't the issue, can you ping the LAN IP of the computer
you
> want to connect to, once you're connected as in case#1 above?

Yes, I can.

> If so, but you can't ping by name, you'll need an LMHOSTS file to do name
> resolution. See
> http://support.microsoft.com/default.aspx?scid=kb;en-us;150800

I can also ping the connected computer by name. Note however that I can only
ping the other computers on the office LAN by IP address and not by name.

Thank you and best regards,
Roger
>
> Again, I'm not an expert on PPTP as I usually use IPSec with a proprietary
> client through a firewall.
>
>

Relevant Pages

  • Re: Using Remote Desktop From an SBS Domain
    ... when you tried to RDP while attached directly to a port on your router? ... So if 3389 needs forwarded on the client end too then that is what the ... Hopefully next week I can attempt a connection while my ISP watches the ...
    (microsoft.public.windows.server.sbs)
  • Re: Using Remote Desktop From an SBS Domain
    ... when you tried to RDP while attached directly to a port on your router? ... Internet to initiate an IP conversation with your computer. ... This situation is different than if you ran your own NAT connection sharing ...
    (microsoft.public.windows.server.sbs)
  • Re: Setting up Home Network w/ 2 Routers
    ... successfully got my 2Wire, Netgear, and Linksys playing nicely. ... Connected the LAN port #1 of 2Wire to the WAN port of the Netgear. ... connection type and all for me. ... If you add another router to the mix, just make sure to disable the ...
    (microsoft.public.windowsxp.network_web)
  • Re: Routers Firewall
    ... I ask him do you have a firewall and he says yes. ... I still have an IDS/firewall on all my machines behind the router. ... > to connect to a port your public IP address the router would reject the ... > An open port on the router could be connected to a service running on the ...
    (comp.security.firewalls)
  • Re: Possible Mail Relay or just new usages of returned mail by spammers
    ... If you have ANY type of firewall, be it a NAT router or true firewall ... ISA can be used in conjunction with the router/firewall, but if you do, you ... to be done twice...once in ISA, and once in the router to port forward to ...
    (microsoft.public.windows.server.sbs)