Windows Forum

Ask something
Discussion Locked

VPN server behind a NAT router

0 helpful
3 replies

by tobs

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I'd like to get some advice on how to set up a VPN server behind a NAT router. Our office is connected to the internet through ADSL. I've connected a router to do the address translation so that PC's in our office can access the web. I've also configured access lists for firewall functions. This is working fine now.
We've recently put up a branch office and I need to be able to share files between the two offices securely. I'm planning to setup a Windows-based VPN server in our head office but still not sure how to go about doing it. I've read in Microsoft web site that implementing VPN server behind a NAT is not advisable. Any thoughts and suggestions would be great help.
Thanks

3 replies

by hydveda

Try using port forwarding, almost all ADSL NAT routers have inbuilt functions of port forwarding. The ports for VPN would be 1723, 47.
configure your router for any incoming connections to that particular port number to be forwarded to the IP of the VPN server and if you router does need any firewall rules to be created , do so.

Regards.

by haileyan

Follow the instructions above making sure you have given your VPN server a static IP address outside of your DHCP servers IP pool.

by sgt_shultz

why not get a second ip address from your isp and setup the vpn server on its own public address rather than drawing public ip traffice behind the nat into your lan...i think ms doesn't recommend it because your lan supposed to be all private, with internet shielded out by firewall and at least nat...better to have proxy server on the internet talking to firewall in the dmz talking to your lan...i think. i am newbie to this...

This discussion is closed to new replies.