Windows Forum

Ask something
Discussion Locked

VPN config question

0 helpful
10 replies

by nick

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

as an administrator at a small company, and
sick of hearing users complain about the 4
ras lines, I've taken it upon myself to set
up a small vpn solution, I have a server, and
the knowledge of how to set it up on the
server side.

My problem is with out network, heres some
background:
6 public IP address, one used by a cisco
router (not currently doing much, and I don't
have access to right now) and a linksys dsl
router doing IP forwarding, DHCP is done b a
seperate server on the local network.

My question is how do I set up the VPN w/an
IP address that can be accessed from the
internet? I have the free public IP
addresses, but am unsure how to implement
this. (ie, i give the server a public IP, how
does it communicate w/the internal network?
is the solution two NICs? or can the linksys
router forward the VPN port to the VPN
machine on the internal network (this is how
our website is run, the port is simply

10 replies

by dao251

"Classic" solution is using two NICs and filtering traffic on the outer one.
As I understand from your description, you router uses NAT for transalting port 80 of your web server. You could make similar config for the RAS (PPTP uses TCP port 1723 protocol 47). There are some articles on MS support site describing possible troubles with PPTP over NAT however.

by mckaytech

I'm not that familiar with the Linksys router but it should be possible to port-forward for VPN.

However, since you already have a public IP you could use for the VPN server, I think that installing two NICs and multi-homing the VPN server on the inside and outside would give the better performance and fewer problems. However, depending on how security-conscious your organization is, this would probably be less secure than putting it behind the Linksys.

paul

by nick

any references or walkthroughs on setting the 2 nic solution up? I set up the vpn service, and am testing it internally, but can't logon to the domain or stay connected for longer than 30 seconds, any suggestions?

This discussion is closed to new replies.