Discussion Locked

VPN and NAT

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Ok here's my little problem. I have a remote station in la and they are behind a barricade firewall. I want them to vpn in to our network at the same time. I know that it wont work if both dial into a single ip so i installed another network card into our vpn server. When i installed it i could not log on to the domain but i am able to ping all 3 ip's.(1 ip is for lan the other 2 is for internet). Ok so i read that you can assign or bind multiple ips to one NIC. Catch is we cant start or logonto the newly assigne VPN ip, the previous one i was able to. So if anyone can help please help.
Thanks

5 replies

by mckaytech

I think one of your assumptions may be incorrect. I have several VPN systems up and running and in all cases, they are running against the same IP.

What are you using for a VPN server?

paul

by jvohs

On NT VPN's are designed to connect from an external network, to an internal network. This requires two interfaces. The MSloopback adapter can be used and will often times allow the connection to be made. NetBIOS only binds to the first IP on thecard, and when the VPN is made the WAN wrapper basically is then the second IP on the card. IP forwarding will allow routing, and an lmhosts file written to access the machine on the MSloopback or internal NIC. The VPN addresses should then be assigned from the same range used internally or on the loopback. Check your bindings. Make sure there is not a bindings conflict on the server. If that is a domain controller, the wrong NIC may be registering with WINS. If it is the NIC the VPN comes in on that could cause a problem. You can have three NIC's, but the default gateway should only be on the VPN nic. If two NIC's are on the same logical network, use only one default gateway, and add a default route with a higher metric for the second card for fault tolerance. You will run into intermittent problems with more than one default gateway. Good luck.

This discussion is closed to new replies.