Windows Forum

Ask something
Discussion Locked

VPN and routing problems

0 helpful
6 replies

by shmaltz 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have dsl connection to the internet and all users connect to the internet thru the dsl line (about 50 users).
A linux machine is set up as gateway/firewall/nat beetween the lan and the internet the lan is a ms network lan using WINNT servers and win98 SE clients.
I recently added a VPN server running WINNT 4.0 sp6 to the dsl line on the same lavel as the linux firewall, with 2 NICs one with a public IP address and the other with a private IP address for the gateway I entered the IP address provided by my DSL provider (I did this on the NIC thats connected to the internet), PPTP filtering is enabled and for the vpn part evry thing works fine (although slow over a 56k modem connected to the internet, any help for this also?) however when i try from the PPTP server to reach an outside IP address it will not go even ping will only work on the local network but not on the outside. When i tried adding a gateway to the NIC which is connected to the lan that should point to the linux gateway vpn clients where not able to connect to the pptp server so I had to leave it with only one gateway, adding the linux IP address as an additional gateway to the nic connected to the internet didnt help, with PPTP filtering disabled I was able toconnect to the internet.
I looked for help on the Microsoft Web Site but nothing helped even adding a static route I think only works when you know the destination network but not when you want to connect to the internet.

6 replies

by mckaytech

From what you've described, the VPN server is behaving as it should. The whole point of VPN is to create a secure "tunnel" between the VPN server and the VPN client. The tunnel analogy is appropriate because once you're inside a tunnel, the only way you can go is to the other end.

With PPTP enabled, you should generally NOT be able to get to the outside world from the server - only to a PPTP client.

paul

by nettek

Enabling PPTP filtering restricts traffic to PPTP-only sessions. However, you can change a registry setting that will enable you to both have your VPN and access the Internet. Make sure you backup the registry.

Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RASPPTPF\Parameters Registry key. Add the value entry AllowPacketsForLocalMachine of REG_DWORD data type 1.

This allows your VPN server to access the Internet, yet restricts incoming connections to the VPN server.

This discussion is closed to new replies.