Forwarding VPN from NAT to internal VPN Server

[USR56K]

Setup:
Cable modem into NIC #1 on NAT (Win2K Pro w/SP2 & Sygate Office Network). Out NIC #2 to hub.

Win2K Adv Server w/SP2 has VPN Server setup. Its using DHCP from the NAT.

I need to devolop a ruleset on the NAT so it will forward the VPN requests that come from the internet to the VPN server (I dont have to worry about IP changing because it doesnt...lease is like 10 years). I've found out that I need to forward TCP 1723 and IP Protocol 47 (GRE) which I've done and it still isn't working.

Only twice have I gotten this error message on the VPN server: The user connected to port VPN3-127 has been disconnected because the authentication process did not complete within the required amount of time." Each time, the person who was connecting says it said the other computer didnt answer. Anyone got any ideas?

 

[USR56K]

Oh common, someone has to have an idea what to do. Here is what the rules setup looks like:
Rules Setup

 

[Garion]

Unfortunately, most VPN clients and servers are very fussy about the source/destination IP being "real" and not NAT'ed. I've never heard of a VPN server that will function behind a NAT and there's only a few specialized routers that will let a client exist behind a NAT.

To get it to work, you might have to run Sygate on your server and expose it to the Internet.

- G

 

[USR56K]

Well nuts! Putting sygate on the server really isn't an option because I want to use 2 NICs and the server only has 1 ethernet port close.

How else could I go about connecting my friends computer to mine to trick games to think we're on a LAN when we're really going over the internet?