Re: VPN Router

From: Buddy Greenshield (gcsbend-at-bendcable-dot-com)
Date: 09/21/04


Date: Tue, 21 Sep 2004 12:08:06 -0700

I've seen a client that was using Direcway. The IP address they had pointed
to some router or other device at the Direcway NOC (Network Operations
Center) Then some sort of signal from the NOC is bounced off of the
satellite and received by my client. The client had a special board
installed in his computer that the satellite coax plugged straight into.
Software on the computer made the board appear as a network card to the
machine and it could communicate. Internet Connection Sharing and a 2nd NIC
was used to share internet with other computers but it was very unstable,
plus, his machine was constantly getting hit with viruses & worms.. like the
AV software could not intercept traffic from the SAT connection.
The address they got from the SAT decoder board was pre-determined by the
ISP, but was different than that on the terrestrial side of the SAT link.
However, if you have a PIX in there, then obviously you have a better
arraingement than this poor fellow had.

As others have said, if you have 2 Nics in the server with ISA running and
CEICW completed, don't worry so much about having the cisco PIX installed.
Still, the VPN over the satellite is going to be problematic at best. Set up
RRAS and just dial in when you need to administer the server.
Buddy

"JJ" <anonymous@discussions.microsoft.com> wrote in message
news:3daa01c49fea$072f23b0$a301280a@phx.gbl...
> Ok Let me give u a bit of background of what I have done
> so far. First we have a static IP for our internet
> connection. The static IP that was given to me by our
> satellite ISP I used to try and connect to our server. No
> go. I get a 800 can not connect to vpn server error. I
> have brought a laptop inside and connected it to the
> network. I can connect to the server and do whatever. So
> the sbs server is configured. Yes I ran the RAS wizard
> before as well to configure the server for vpn. So I went
> over to a client near by, also using satellite and tryed
> to connect to the sbs server using the IP address that
> was given to me but get the same error. This was done
> with going from internet right into our server, no
> firewall attached between internet and sbs server. I just
> did this for like 1 minute and rehooked up the firewall
> back between the internet and sbs server. We have a cisco
> PIX firewall that I have no idea to configure, well kind
> of an idea just don't know exactly what the commands do
> in setting them in the pix. We do have a machine that
> creates a VPN out our network to a remote machine with no
> problem. So I am thinking that the firewall is setup to
> allow VPN connections. I was going to use a cheapy third
> party cable router to put in between so that I can make
> sure it's not the router.
>
> ** The static IP address that the ISP gave me when I
> check the outside nics address isn't the same. IS the ISP
> using some sort of mapping of IPs or should they be the
> same?
>
> Thanks,
> JJ
>
>
>
> >-----Original Message-----
> >Dial up does not really need vpn because it already
> communicates over a
> >private telephone circuit, not the public internet. Also
> a few companies are
> >now claiming to have the VPN over sattelite issues
> solved. One is
> >Opti-streams, I think.
> >
> >Assuming you have regular ethernet comming out of the
> sat tranceiver, you
> >could put a switch behind it and stick a plain $49.-
> linksys router and the
> >ISA WAN nic into the switch. Your test workstation
> behind the linksys
> >router would act as one coming from anywhere on the
> internet as far as the
> >SBS is concerned. You may not have all the proper DNS
> services available to
> >the test workstation, but a Hosts file will get you what
> you need.
> >
> >Is that what you were talking about ~ a test workstation
> on site that looks
> >like it's coming from the internet? Or are you looking
> for some kind of
> >remote control to your SBS? (I.E. RWW)
> >
> >Buddy
> >
> >"JJ" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:379501c49f80$600ad750$a301280a@phx.gbl...
> >> Ok is it possible to put in another connection using
> Dial
> >> up with VPN ?
> >>
> >> They don't have any other option right now except for
> >> Satellite and DialUp. They are located in the sticks.
> >>
> >> JJ
> >>
> >> >-----Original Message-----
> >> >Why use a VPN capable router, just terminate at SBS.
> >> >
> >> >PS I've heard stories of people successfully using VPN
> >> over satellite but in
> >> >my experience IT DON'T WORK, the latency of the
> >> connection is too high.
> >> >
> >> >"JJ" <anonymous@discussions.microsoft.com> wrote in
> >> message
> >> >news:016401c49f47$d8e04f90$a601280a@phx.gbl...
> >> >> Hi All,
> >> >>
> >> >> I was wondering what should I use for a VPN
> Router? We
> >> >> have a sbs2003 server with 2 nics installed. We use
> >> >> satellite for our connection to the internet. I
> wanted
> >> to
> >> >> install a router that allows for VPN that I can
> stick
> >> >> between the internet connection and the sbs server.
> I
> >> >> need your recommendation for a troubleshooter router
> >> and
> >> >> for a permnent router in same scenario. The
> >> >> troubleshooter router I want to use is for
> connection
> >> >> trouble shooting from internet to sbs server 2003.
> So
> >> it
> >> >> needs to be a cheapy plz.
> >> >>
> >> >> Thanks,
> >> >>
> >> >> JJ
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >



Relevant Pages

  • Re: Urgent! New router and big disaster
    ... The SBS DNS server, running on ... its IP it means that your problem is now DNS. ... forward ports to it reliably in the router. ... I should have been more clear about internet connection.. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... I checked the binding order and the Server Local area connection is at the top. ... I should have been more clear about internet connection.. ... I wonder if I may have missed a firewall setting on the router as well. ...
    (microsoft.public.windows.server.sbs)
  • RE: Small network with lots of features, questions
    ... Your network sounds overly complicated to me. ... to get to the internet. ... To do that, without using your server as a router, you need ...
    (microsoft.public.windows.server.networking)
  • Re: Urgent! New router and big disaster
    ... I checked the router, I am running a laptop off of it so I can post. ... Les Connor [SBS Community Member - SBS MVP] ... make sure the DHCP Client Service is running on the server. ... First Page of the Internet Connection Wizard, ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Issue
    ... 317025 You Cannot Connect to the Internet After You Connect to a VPN Server ... | first done with a standard usb broadband modem on XP Professional. ...
    (microsoft.public.windows.server.sbs)