Windows Forum

Ask something
Discussion Locked

Remote Office VPN & Win2K Server Routing

0 helpful
3 replies

by desktop jinx 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

If I configure a VPN connection on a Win2000 server, will it route the connection to its LAN? (I assume I'll have to turn on the Routing service.) In other words, will workstations on the same segment as the server be able to see the other side of the VPN connection?
Or will I lose the LAN through which VPN is running and have to configure a second interface or network? (e.g. add a NIC, make it 192.168.2.1, hang the workstations off it)

I think I'm just getting tripped up on configuring theroutes, but I'd like to know I'm not attempting the impossible.

Network:
192.168.1.3 - Win2000 client, GW=192.168.1.2
192.168.1.2 - Win2000 server, default route=192.168.1.1
add VPN to x.x.x.x
192.168.1.1 - Linksys DSL router
x.x.x.x - VPNserver
10.y.y.y - HQ's internal network

When I add the VPN I get a new default route through the VPN, but my workstation gets nowhere. If I turn on the server's Routing service, the VPN times out and neither workstation nor server get anywhere.

3 replies

by rivertf

You should read a little more about MS VPN before attempting to activate the service.

First there is a distinction between a client vpn and a server vpn. Microsoft client OS uses nat to activate a "home coking" VPN service.
Microsoft adv server os uses RRAS for activating a VPN service. So you have to install it on the server.

Second VPN are configured trough filters (like the nat ones) applied in VPN polices. So that means that only the machines identified in the polices will use VPN services, the others will be denied access to the VPN service, but if they will continue to access other areas of the network is just a question of polices.

The question of the network card just depends on the physic part of the network, if the machine is being a router it has to have to have two NIC, if not you can assign two IP numbers to the same nic, one for use of the unsecured network, and the other for vpn use (usually sent to a router by a different default gateway).

I would recommend you to read MCSE Training Kit "Designing Microsoft Windows 2000 Network Security" and/or Sybex books on the same subject. Just look for the ones marked exam notes for exam 70-220. It would be a good asset for you.

Any more info, please fell freeto e-mail me.

This discussion is closed to new replies.