Re: Can VPN be tested from inside the network?



Hi Leon,

Looking at the IPs you have one of the problems that Joe describes. Your lan subnet which I presume is at the remote location you are vpn'ing from is 192.168.1.0/255.255.255.0 this is also the same as the SBS subnet. This is the first thing to change.
simon
Leon Willard wrote:
Here are the results of my PC IPCONFIG /ALL with VPN connected to the office.
Please give me an assessment. I don't really know how to interpret these results.
Thanks, Leon


Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Mr Bear>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : lwcs-msi
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : gateway.2wire.net

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : gateway.2wire.net
Description . . . . . . . . . . . : NVIDIA nForce MCP Networking Adapter

Physical Address. . . . . . . . . : 00-0C-76-1A-4A-D7
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.102
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.254
DNS Servers . . . . . . . . . . . : 192.168.1.254
Lease Obtained. . . . . . . . . . : Wednesday, June 14, 2006 12:15:40 PM

Lease Expires . . . . . . . . . . : Thursday, June 15, 2006 12:15:40 PM

PPP adapter WTA VPN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.120
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 192.168.1.120
DNS Servers . . . . . . . . . . . : 192.168.1.2

C:\Documents and Settings\Mr Bear>


"Joe" <joe@xxxxxxxxxxxxxx> wrote in message news:e6poe5$qr1$1$8302bc10@xxxxxxxxxxxxxxxxxxx
Leon Willard wrote:
We finally have SBS2003 working pretty much as we want. Our remaining problem is that after successfully connecting to the server with VPN (and very quickly) we still can't browse or otherwise access workfiles on the server. We've gone over and over the settings and they seem just fine, but yet no connection.

Making changes and then going to an outside computer to try the VPN system is very time-consuming and inconvenient. So my question is this: Is there a way to test the VPN network from inside the network?

You can test some things from the LAN, but not others, which makes it
useful for eliminating some potential problems. A lot of ducks have to
be lined up for VPN to work.

Unfortunately, the most common reasons for failure are not tested this
way, but you can eliminate the possibility that VPN is not enabled on
SBS or that the user doesn't have the right permissions.

The single most common reason for what you describe is that the client
machine has an IP address (usually its LAN connection) which is in the
same subnet as the SBS LAN. Many routers default to 192.168.0. or .1.
so it is not unusual to find the routers at both ends have the same
internal subnet. One must be changed, and if the SBS end is changed
you might as well move it to something unusual, such as 192.168.75.
or one of the other private ranges.

The next most common possibility is that the VPN connection at the
client end is not configured to get both IP address and DNS server
automatically. If you run ipconfig from the command line with the
VPN connected and do not see the SBS LAN IP address as the DNS server
for the PPP connection, this is the problem.

If neither of these is the trouble, it is still probably TCP/IP
configuration which is the issue. The ipconfig /all command run on both
SBS and remote client (with VPN open) usually tells us enough, so do
that and post the results here.


.



Relevant Pages

  • Re: Encrypted VPN software?
    ... >>>servers which brokers the connection. ... >>>There has been a great series of discussions of VPN issues by Steve ... >faraway LAN as if it was just another local computer on that LAN. ... >> IOW, is this a form of anonymous connection with encryption, or is ...
    (alt.privacy)
  • Re: Encrypted VPN software?
    ... >>establish the original connection; thereafter the two ends of the VPN ... faraway LAN as if it was just another local computer on that LAN. ... does offer is once-and-for-all encryption and authentication with no need ...
    (alt.privacy)
  • Re: VPN usage question
    ... Exactly the same as a LAN. ... > A VPN is a network connection on top of another connection. ...
    (microsoft.public.windowsxp.general)
  • RE: VPN Failing after SBS connection
    ... I was trying to download from the server. ... After I connect via vpn I am able to browse all computers on the corporate ... though I only have about a minute before the connection decides to stop ... time - If I browse the LAN for a little bit then it quits working after about ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Client Incorrect Netmask (Vista -> Win2K3)
    ... server, "connection specific" DNS domain suffix, and the appropriate Subnet ... Mask from the DHCP server at the remote (VPN Server) side (if a DHCP Server ...
    (microsoft.public.windows.server.networking)