RE: VPN Requirements

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Hi Tim,

Thank you for posting in SBS newsgroup.

You surely can setup VPN on SBS Standard edition.

Generally, you may follow the steps below to configure VPN access on an SBS
environment:

1. Run CEICW, follow the wizard and select Enable firewall and then make
sure Virtual Private Networking (VPN) is selected in the Services
Configuration page. And make sure you have typed the public FQDN of the SBS
server on the Web Server Certificate page.
2. Run Remote Access Wizard in Server Management\Internet and
E-mail\Configure Remote Access, and select VPN access in the Remote Access
Method page. After finishing this wizard, RRAS is configured to allow
inbound VPN access, and it can assign IP addresses to the VPN clients by
using DHCP.

Note: When we run the remote access wizard to set up the VPN service, we
need to input the public IP address or the public FQDN of the SBS server.
We need to make sure that the address can be accessed from the internet.

3. On the VPN client, go to https://publicFQDN/remote, clear I'm using a
public or shared computer, log in and download Connection Manager.
4. Install Connection Manager on the VPN client.

Please also refer to the following KB articles:

323381 How to Allow Remote Users to Access Your Network in Windows Server
2003
http://support.microsoft.com/?id=323381

323441 How To Install and Configure a Virtual Private Network Server in
Windows
http://support.microsoft.com/?id=323441

If there is a hardware router/firewall installed in front of the SBS server
please make sure that the port forwarding for TCP 1723 and GRE port
(protocol number 47) are opened. PPTP VPN is negotiating a connection on
TCP port 1723 and send data to and from the PPTP server using the GRE
protocol (IP Protocol 47, 0x2F if you are looking in Network Monitor). You
should open port 1723 on the router/firewall and also make sure IP Protocol
47 is allowed.

Hope the above information help and I look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: VPN Requirements
| | From: =?Utf-8?B?VGltIEJ1cmtl?= <Tim Burke@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: VPN Requirements
| Date: Wed, 21 Dec 2005 13:39:02 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Can you setup a VPN with SBS Standard Edition or do you need the Premium
| Edition?
|
| Any help would be greatly appeciated.
|
| Thanks!
|

.



Relevant Pages