• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

VPN configuration on a win2k server

cygan

Member
I have to get a VPN done at my client's place. The server is a Win 2K SB Server. The machine has 2 lan cards, one which connects to the local lan with an IP address of 192.168.0.113 and a subnet mask of 255.255.255.0. The machine is connected to the internet via an ADSL router, in which the IP address is obtained automatically, and the primary and secondary DNS are set to 203.94.227.70 and 203.94.243.70. When I do an ipconfig on the lan card connecting to the internet, it returns an ip address 192.168.1.2 with a subnet mask 255.255.255.0 and the default gateway 192.168.1.1.

The client has now received a static/ fixed ip address from the internet company 59.181.103.20. I am aware that I have to get the RRAS configured in win2k. Can anyone please let me know how to configure the static/ fixed ip address for VPN, because the moment I change the settings of the internet lan card to use the ip address 59.181.103.20 with a subnet mask of 255.255.255.0, the internet cannot be accessed. Does this setting have to be by default set to obtain an ip address automatically, or is what I am doing correct? Thirdly, I have observed that I receive a ping response on 59.181.103.20 even when I have not configured any machine to use the same static ip, nor is any machine on with the same ip. You can even try it now, even though there is no machine with that static ip. Is this possible & how?
If I am not using DHCP while configuring RRAS, what IP pool should I select for remote clients who log in.

And the clients whoshall be logging in are connected with a different group or classof ips to their own lan(192.168.1.xxx). They will be connecting to the internet via a proxy server like analog proxy. Is this ok or is there a better way of doing this? The log in clients are amix of win98 and win XP machines.Will the vpn work with such a different class of ips. And how do I configure a remote connection?

I know these are a lot of questions, but want someone to help me desperately.

Thanx in advance.
 
I'm not familar with SBS 2K. However, I can tell you that in SBS 2003, manually changing the Internal IP address is a mistake. There's a wizard for it that must be used. Otherwise, it totally messes up the various services like DHCP and DNS. And it probably messes up RRAS as well.

Setting up a PPTP VPN in SBS 2003 is simple. But you MUST use the Wizards, or you will have a mess on your hands.

1) Run the "Connect to the Internet" wizard. This will let you reset the External IP address.
2) Run the "Configure Remote Access" wizard.
3) For safety, run the "Configure Firewall" wizard, making sure that any checkboxes for VPN are checked.
4) If you are using an external (hardware) router, have the router forward TCP Port 1723 to the External IP address of the SBS Server. Also tell the router to forward all Protocol 47 (GRE) traffic to the SBS IP address.

That's all there is to it. It takes about three minutes with SBS 2003 (other than setting the external router port and protocol forwarding for VPN passthrough). SBS will automatically use its internal DHCP server to provide suitable IP addresses and its DNS server to provide DNS service to the VPN clients.

I have NO idea how different SBS 2K is. Sorry.

VPN clients are easily set up using the standard Windows VPN client. As long as you know the IP address of the SBS Server, it's a piece of cake. If you get errors, then try accessing the VPN from inside your network. If it works from inside, but not from outside, then you have router/firewall/VPN Passthrough problems.
 
Back
Top