Re: VPN with only 1 NIC??

From: Merv Porter [SBS-MVP] (mwport_at_hotmail.com_no_spam)
Date: 02/14/04 

Date: Sat, 14 Feb 2004 18:08:54 -0500

A second NIC offers an additional layer of security... your primary firewall
is RRAS (SBS 2003 Std.) or ISA (SBS 2003 Premium) while your router offers a
secondary firewall. Mariette's web site has some diagrams that explain
more, although they were originally designed for SBS 2000:

http://www.smallbizserver.net/DesktopDefault.aspx?tabid=28

Basically, the hardware flow is: (external = connected to router; internal
= connected to LAN switch)

Broadband Modem => router => External NIC in SBS

The internal NIC in the SBS and all the workstations would then be connected
to the LAN hub or switch.

DHCP is disabled on the router and enabled on the SBS. The external NIC and
the router are both in the same subnet and this subnet is different from
that of the SBS and workstations. Then you run CEICW to configure the RRAS
firewall and other services. After that, open the proper ports in your
router to forward the desired external traffic to the external NIC in the
SBS. Some routers are UPNP compliant and CEICW can automatically configure
the router for the services you select. (However, this automatic setup
using UPNP doesn't always work properly so you may still need to set up the
router manually).

There have been some problems with Linksys routers not properly handling
PPTP and GRE protocol 47, which are required for standard VPN. This problem
*may* be addressed by flashing the router with a later version of Linksys
firmware.

Remember also that some Cable and DSL providers do not allow you to set up
VPN servers. That said, chances are your VPN issue is a network
configuration problem or firmware problem with the Linksys router. 

-- 
Merv  Porter  [SBS MVP]
===================================
"Jose" <anonymous@discussions.microsoft.com> wrote in message
news:fd2901c3f349$aecedaa0$a101280a@phx.gbl...
> I'm still having trouble creating a VPN connection from
> home to the SBS2003 server at the office.
>
> Could the reason be that the SBS2003 is behind our Linksys
> router using only one NIC?
>
> Is a VPN possible in this configuration:
>
> Internet
>    |
> Cable Modem
>    |
> Linksys Router
>    |        |
> SBS Srver   Clients
>
> Or should I install the additional NIC in the SBS2003
> machine?
>
> If I need to install the NIC, would the machine connect
> directly to the Cable Modem?  If so, is the Firewall in
> SBS2003 as robust as the Linksys Firewall?  Would the
> following be the configuration:
>
> Internet
>    |
> SBS Server
>    |
> Linksys Router
>    |
> Clients
>
> thanks!

Relevant Pages

  • Re: Pros/Cons of Single/Dual NIC Card Topology?
    ... As you already own ISA, and as SBS has a network configuration script that's designed and proven to create a secure ISA configuration that's SBS 'aware', it's really a no-brainer. ... As Dave already mentioned in his reply - there's some benifit to using your existing nat router as well. ... > router/firewall just for its firewall capability. ...
    (microsoft.public.windows.server.sbs)
  • Re: Dual Nic vs. Single Nic
    ... I never like to hook an SBS server ... I also agree with that router you would be better ... served with more firewall capabilities such as packet filtering. ... A simple NAT router in front of either ...
    (microsoft.public.windows.server.sbs)
  • Re: stealth bridge -- will this work?
    ... > get that LinkSys router to do advanced configuration like this... ... You want a transparent bridging firewall, and you want Windows to do it? ...
    (comp.security.firewalls)
  • Re: 1 NIC vs. 2 NICs w/NetGear router
    ... Use the SBS firewall (layer 1). ... Plug my NetGear router into NIC 2, with it's firewall turned on and plug the ...
    (microsoft.public.windows.server.sbs)
  • Re: best network setup?
    ... I have to pickup a nice router now. ... Two nics allow separation of the internal and external networks, ... Two nics allow the SBS to provide the services that it knows best how ... > firewall is down for any reason. ...
    (microsoft.public.windows.server.sbs)
Loading