Re: Secure VPN access
- From: v-crinal@xxxxxxxxxxxxxxxxxxxx ("Crina Li")
- Date: Mon, 06 Feb 2006 09:35:07 GMT
Hi Susantha,
Thanks for your update.
I am back now. Also thanks Cliff and Bill's time and efforts on the issue.
As I know, when creating a VPN connection, the VPN server will add a static
route in its routing table and it will also push a routing record in the
client's routing table. If we deselect the default gateway option and then
we cannot ping the server, this is obviously an IP routing issue. You
should contact the router vendor to see if you have configured router
correctly. You should re-configure the router to add the corresponding
routes when clients create VPN connections.
I am appreciated your time and look forward to hearing from you.
Best regards,
Crina Li (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Reply-To: "susantha silva" <susanthasilva@xxxxxxxxxxx>
| From: "susantha silva" <susanthasilva@xxxxxxxxxxx>
|| Subject: Re: Secure VPN access
| Date: Fri, 3 Feb 2006 11:22:06 -0000
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| I tried that method after looking into your advise. But unfortunately it
| didn't work, when I do that I can't even ping the server IP address in
the
| VPN connection! Looking at the VPN connection settings I found there is
no
| default gateway when I untick the "Use default gateway on remote network"
| I was thinking to give a try to use the Microsoft built in VPN service
but
| stepping back due to the security concern. The whole idea of getting the
| D-link firewall is to prevent security problems. I'm not quite sure what
| step to be taken next. BTW I'll try to post a pic of the PPTP serer
setting
| sin the firewall also.
|
| Regards,
|
| Susantha
|
| ""Cliff Zhang [MSFT]"" <junzhan@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:YOBpgJvJGHA.224@xxxxxxxxxxxxxxxxxxxxxxxx
| > Hi Susantha,
| >
| > Thank you for posting back!
| >
| > Actually in Windows XP/2000, a VPN connection will by default use the
VPN
| > sever's IP as its default gateway and thus all traffic including the
| > Internet traffic will go through
| > the VPN server. This is different from legacy clients such as Windows
| > 98/ME. To make the XP/2K clients to browse the Internet without going
| > through the VPN server, we
| > can disable the "Use default gateway on remote network" option in the
| > dial-up connection's properties on the XP/2000 clients. To disable this
| > option, please right click on
| > My Network Places and choose Properties, right click on the VPN
connection
| > and choose Properties, click the Netwoking tab, double click the
"Internet
| > Protocol (TCP/IP)"
| > entry, click Advanced and then uncheck the "Use default gateway on
remote
| > network" box. Click OK three times and then check if the issue
disappears.
| >
| > For more information, see:
| >
| > 254231 Change in Remote Access Route Behavior with Windows 2000
| > http://support.microsoft.com/?id=254231
| >
| > Thank you for your time!
| >
| > Sincerely,
| >
| > Cliff Zhang
| > Microsoft Online Partner Support
| > MCSE 2000/2003
| >
| >
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| >
| > =====================================================
| >
| > Business-Critical Phone Support (BCPS) provides you with technical
phone
| > support at no charge during critical LAN outages or "business down"
| > situations. This benefit is
| > available 24 hours a day, 7 days a week to all Microsoft technology
| > partners in the United States and Canada.
| >
| >
| > This and other support options are available here:
| >
| > BCPS:
| >
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
| >
| > Others:
https://partner.microsoft.com/US/technicalsupport/supportoverview/
| >
| >
| > If you are outside the United States, please visit our International
| > Support page:
| > http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| >
| >
| >
|
|
|
.
- References:
- Re: Secure VPN access
- From: "Cliff Zhang [MSFT]"
- Re: Secure VPN access
- From: susantha silva
- Re: Secure VPN access
- Prev by Date: Re: Remote Access and Outlook Web Access on SBS 2003
- Next by Date: RE: POP3 to SMTP
- Previous by thread: Re: Secure VPN access
- Next by thread: help with companyweb
- Index(es):
Relevant Pages
|
Loading