Windows Forum

Ask something
Discussion Locked

W2K as VPN Gateway

0 helpful
3 replies

by mckaytech 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I've been scratching my head on this one.

Is it possible to use a W2K server as a router-to-router VPN gateway and also pass non-VPN Internet traffic through the same interfaces?

I guess what I'm asking is whether it is possible on a W2K box to route traffic either into the tunnel or around it, depending on destination.

I'll appreciate any answers or insight.

3 replies

by maxwell edison

Yes, Windows 2000 Server can indeed be configured as a router in a router-to-router VPN. However, I must admit that I haven't done it, but have looked into it.

According to Microsoft:

Windows 2000 Router Features for the IPX Protocol Suite:

The Windows 2000?based computer running the Routing and Remote Access service, known as the Windows 2000 Router, provides a rich set of features to support IPX internetworks:

IPX Packet Filtering Input and output filters for each interface, configured using key fields in the IPX header.

RIP for IPX Full support for Routing Information Protocol (RIP) for IPX, the primary routing protocol used in IPX internetworks.

IPX Route Filtering Filtering for incoming routes and for the announcement of routes.

Static IPX Routes Static IPX routes that are advertised using RIP for IPX.

SAP for IPX Full support for Service Advertising Protocol (SAP), the mechanism by which the names and addresses of services running on IPX nodes are collected and distributed for NetWare clients.

SAP Filtering The filtering of incoming service names and the announcement of service names.

Static SAP Services Static SAP service names that are advertised using SAP.

NetBIOS Broadcast Propagation The forwarding of NetBIOS over IPX broadcasts, flexibly configured over local area networks (LAN) and demand-dial interfaces.

Static NetBIOS Names Static NetBIOS names that can be configured so that NetBIOS over IPX name query broadcasts for specific NetBIOS names can be forwarded using specific interfaces.

Platform to Support Other IPX Routing Protocols A platform to support additional IPX routing protocols, such as NetWare Link Services Protocol (NLSP). (The Windows 2000 Router does not provide NLSP, but NLSP can be provided by third party independent software vendors.)

Link:

http://tinyurl.com/pbcx

(There's a lot more information at that link.)

continued...

by maxwell edison

Also, you may want to follow this link:

http://tinyurl.com/pbdc

It's a page with links to MS whitepapers on windows 2000 VPNs. The whitepaper titled, "Virtual Private Networking with Windows 2000: Deploying Remote Access VPNs" is especially detailed.

As I mentioned earlier, I did look into doing this, but I couldn't quite get all the pieces to fit together. So I changed my strategy, bought a linksys BEFVP41 router (up to 70 VPN tunnels), which cost about $150, and used Sentenal SSN VPN software on the remote end to establish an IPSec tunnel.

By the way, I don't think he would mind if I mentioned his name, but Joseph Moore (look on the Q&A top 5 scorers list) is quite knowledgable with this, and he probably wouldn't mind it if you sent him an email. I'm sure he would have posted an answer to this question, but just didn't see it.

This discussion is closed to new replies.