Issues with setting up VPN

[zimu]

hey guys,

hoping to get some help here. I've just set up my windows 2008 server to allow incoming vpn connections using this: http://www.wowtutorial.org/windows-...nd-configure-vpn-server-windows-2008-379.html

I've managed to connect to it using my windows 7 laptop (different location / network). I'm trying to get ALL traffic from my win7 pc to be routed through the 2008 box.

When I connect successfully to the 08 server, I'm unable to surf the web, it shows me as disconnected. if i go to the vpn settings, and change the ipv4 setting to disable the checkbox next to 'use default gateway on remote network' i'm online again, but traffic isn't routed through the 08 box, it's just using my home internet connection. the vpn status also shows no internet access for the vpn connection.

any ideas?

 

[classy]

When you connect to the VPN server are you getting a correct IP address? How is your VPN server setup to give IP Addresses, DHCP or static pool? Connect to the VPN server and then configure a static IP and see if you can reach the internet that way.

 

[Emulex]

if you have a cheap $25 dd-wrt router you can just use it as the vpn endpoint. iirc it supports PPTP (easiest) to dns tunnelling (sneaky!) to ethernet over IP (bridge really).

it's a real pita to get bonjour to work over a vpn

you know most devices have an order of binding. so if the vpn is lower than the default network adapter or the checkbox for send all traffic through this interface (of combo of both) must be met to route the traffic automatically.

 

[zimu]

When you connect to the VPN server are you getting a correct IP address? How is your VPN server setup to give IP Addresses, DHCP or static pool? Connect to the VPN server and then configure a static IP and see if you can reach the internet that way.

yep, getting a correct ip address from the pool I defined - static, no dhcp. so it's 192.168.1.11 that i'm getting, from the pool i defined as 192.168.1.10-40.

if you have a cheap $25 dd-wrt router you can just use it as the vpn endpoint. iirc it supports PPTP (easiest) to dns tunnelling (sneaky!) to ethernet over IP (bridge really).

it's a real pita to get bonjour to work over a vpn

you know most devices have an order of binding. so if the vpn is lower than the default network adapter or the checkbox for send all traffic through this interface (of combo of both) must be met to route the traffic automatically.

have a dd-wrt router, but wrong way around i.e. the vpn server is in a datacenter, not on my home connection. i'm connecting TO it from home / office.

the binding thing - not sure. quite sure traffic is going through vpn though, whichever way i set it up i'm able to connect to 192.168.1.103 which is the 'internal' ip of the win2008 machine, and can connect to //192.168.1.103/c$ to view the c drive on the 2008 box.

 

[classy]

yep, getting a correct ip address from the pool I defined - static, no dhcp. so it's 192.168.1.11 that i'm getting, from the pool i defined as 192.168.1.10-40.



have a dd-wrt router, but wrong way around i.e. the vpn server is in a datacenter, not on my home connection. i'm connecting TO it from home / office.

the binding thing - not sure. quite sure traffic is going through vpn though, whichever way i set it up i'm able to connect to 192.168.1.103 which is the 'internal' ip of the win2008 machine, and can connect to //192.168.1.103/c$ to view the c drive on the 2008 box.

Hey do this. Connect using the VPN. Then do an ipconfig /all to see what your gateway info is on the vpn connection. If you can browse the network, then the VPN tunnel is correct, but if you can't reach the internet, your routing/gateway is not correct.

 

[classy]

Also post this in Networking or have the mods move it. There are guys over there that this is all they do. But it sounds like misconfiguration of routing/default gateway.

 

[zimu]

Hey do this. Connect using the VPN. Then do an ipconfig /all to see what your gateway info is on the vpn connection. If you can browse the network, then the VPN tunnel is correct, but if you can't reach the internet, your routing/gateway is not correct.

found the issue!

Quite a simple step. in the isntructions it says pick the remote access (dial-up or vpn) option, whereas you need to also select NAT.