Discussion Locked

Remote access to LAN thru Proxy server

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My boss wants to access one of our LANs from his home for file sharing. We have 5 LANs connected by ISDN and DSL that get Internet access from a central Backoffice (Proxy) server. He has 512k DSL at home and I am wondering if I can set him up to bypass the proxy server without compromising existing security. Will he need a static IP address?

5 replies

by agibbs

No, he does not need a static IP address. But your proxy server DOES need a static IP address.

I assume what you're looking for is some kindof VPN setup where your remote user (your boss) wants to connect via his DSL line at home to your LAN at work. First off you'll need to download the Routing & Remote Access Service for NT from the Microsoft website. Install this, and remember (important!) to reinstall your latest service pack (at least SP4) to fix known security issues with the RRAS service.

After installing RRAS on your Proxy server you'll need to add a packet filter (PPTP Receive) to bypass the firewall so your boss can get through. Otherwise Proxy will block him out.

Let me know if you need more help, I've done this a million times . . .

--Aaron
agibbs@kanebpipeline.com

by aekland

The previous answer will work. You can also setup a multihomed VPN server that completly bypasses the proxy or set up the proxy to only pass VPN traffic to the VPN server. Any outside connection will compromise security. If this will be on going I would make sure his DSL computer is protected, both from viruses and from easy hacking.

This discussion is closed to new replies.