Networks

Ask something
Discussion Locked

Client to VPN to Server

0 helpful
9 replies

by rwillett

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a Windows 2003 server and LAN with 7 computers tied in through a HP Switch. Internet connection is through a Linksys VPN box. We just added an out of town office with 4 Windows 2000 computers. These computers are connected to the VPN. They have been given an account in the server. But I cannot figure how to connect them properly. I have mapped a drive so they have access to some files. I need them to be able to log on to the Server as anyone else on the LAN. If they open Windows Explorer, they need to be able to see the choices on the server. Right now "My Network Places" shows nothing on the LAN or Server to the out of town office. If they try to sign on under the domain, the domain does not exist.

9 replies

by cg it

have to install and configure RAS server on you W2003 box to include DHCP for RAS clients. IF the remote office has it's own DC server [DNS etc]you ought to make it a site within your domain namespace and use active directory sites and services to create a site-link for AD replication. Give ya some DC redundancy for the network and allows the site[s] to share resources with each other [trusts between the 2]. .

by rwillett

Small Business Server does not allow other Domain Controllers, I believe. And I'm not sure about the DHCP for RAS. Their Internet Addresses are assigned by the ISP through their router. Honestly I'll accept the answer just as soon as I can make it work.

by cg it

well you didn't mention SBS just Windows 2003 server. Small Business Server makes a BIG difference.

Now that you have, you still need to install Routing and Remote Access Server RRAS for remote clients to be able to log in to the SBS server. Also you CAN have additional DCs with SBS server. I have 2 with my SBS 2000. You can't create trusts between domains with SBS so making the remote site a site won't work. BUT you can have the remote site seen as not remote by SBS. Just don't make the site a site. SBS doesn't care if the link between DCs are WAN or LAN as long as the DCs are within the same domain.

Still bottom linke is you HAVE to have RRAS installed and configured with the default 5 VPN PPTP and L2TP ports AND your firewall has to allow PPTP /L2TP port 1723 passthrough for remote VPN into your network.

by cg it

there's a bunch of articles on Microsofts help and support site for remote access to SBS via VPN. Oh by the way you running standard or platinum edition [ISA server]???

Here's a link to the Microsoft Help and Support article dealing with VPN Remote Access for SBS http://support.microsoft.com/default.aspx?scid=kb;en-us;324262&Product=sbs

Heres a link for RRAS DHCP http://support.microsoft.com/default.aspx?scid=kb;en-us;232703&Product=sbs

This last link is for SBS 2000 but it applies as a basis for RRAS in SBS2003 http://support.microsoft.com/default.aspx?scid=kb;en-us;320697&Product=sbs

Just to give you an idea that you need RRAS installed to allow VPN Remote Access.

by cg it

last comment. make sure your firewall allows PPTP port 1723 and GRE port 47 pass through or create filters in your Firewall to foward port 1723 to your SBS server External Interface {I assume your using 2 NICs. SBS really works well with 2 NICs. 1 WAN and 1 LAN].

by cg it

ah an oops damnit. Have to get new bifocals.

What Linksys VPN router your got? If you have the Linksys BEFSX41 VPN Endpoint, thats a whole nother ball of wax. The Endpoint routers establish and maintain the VPN tunnel. thing is you need 2 of em to create the tunnel. THEN there is the exchange of data within the tunnel between the remote clients and the SBS server. It works better for remote access if you didn't use the VPN tunnels on the router itself and use RRAS on the SBS box and have to router foward the port 1723 traffic to the SBS box.

This discussion is closed to new replies.