Windows Forum

Ask something
Discussion Locked

Win2k server-server VPN, 1 NIC

0 helpful
13 replies

by christotg

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have two Win2k servers, one at work and one at home. I want to VPN between them, but I can't get it to work properly. Is there a particular way to set up VPN server within RRAS on a machine with a single NIC?

13 replies

by christotg

Answers like this are ridiculous. Does your mommy know you're playing with her computer, little girl?

by shepster

My, you are getting the helpful answers aren't you? OK, firstly, which machines have public IPs? Second, is there a firewall in between (please say yes)? Thirdly, can you ping the one that you want to be your VPN server from the other? Let me know answers for these and we can go from there.

by shepster

OK, you say that you can establish a VPN connection between your client and a non-DC machine through the firewall (NAT). I wish they had some sort of whiteboard picture that you could attach to these postings! It would make this so much easier. Anyways, I am just reaffirming that your NAT is working both ways, incoming and outgoing. If you can connect through the full circuit with one machine as the VPN server, but not another, that leads to a completely different problem than not connecting at all. I guess that my next question would be, if you can setup a VPN session to a non-DC server, why isn?t that sufficient? Most of the recommendations I have read advise against making a DC a VPN server anyways. Mainly because VPN is a security hole and if someone hacks into your domain through VPN and is connected to a DC, this could make their destructive efforts much easier. I am sorry, but I am pressed for time and will stop here. If you really must have your DC as your VPN server,let me know and I will keep trying to work through this with you. Loved that ?go play with a ball response btw :D.?

by christotg

(VPN Client) ---- firewall ---- (INTERNET) ---- (NAT Firewall) ---- (VPN Server)

in other words, each device is behind NAT. The client has a live IP, the server is behine port forwarding NAT with PPTP and IKE being forwarded. I know the forwarding is working OK because I can go workstation-workstation VPN successfully.

The desired effect is to do workstation-server VPN but I get errors like the following: TCP/IP error 733 (your computer and the server could not agree on PPP protocols), error 668: the connection was termintated, and error 6: the hadnle is invalid.

by christotg

A minor clarification - when I say 'workstation' in my first comment I mean a non-domain controller. (whether server or professional product)

by christotg

I found a solution to this about a month after posting it. I had "Rx/Tx Checksum Offloading" enabled on the NIC on a computer at one end, and it was causing weirdness with one of the firewalls. As soon as I disabled the offloading, the VPN worked perfectly.

This discussion is closed to new replies.