Fw: Almost OT : ANyone got MS Windows VPN Server working behindtheir NAT router ?

[Gareth Cook <g@xxxxxxx>]

I used the wizard - and I cant get it to work on the local lan - thought
it may be because im in the same subnet

G.

Gareth Cook
BTPM North Region
IBM SWG - BTE Office - Lotus Park, Staines, TW18 3AG
Office: +44 (0)1784 445166 - Mobile: +44 (0)7980 445166
AIM Chat : TheBoyG - MSN Chat : chat@xxxxxxx
email: g@xxxxxxx


----- Forwarded by Gareth Cook/UK/IBM on 04/06/2003 13:52 -----

Discussion
Main Topic

"Dan" <dtoma@xxxxxxx>
Today 13:21

.
Subject:
.
Re: [ukha_d] Almost OT : ANyone got MS Windows VPN Server working behind
their NAT router ?
.
Category:



Hi,

Do you have any sort of firewall on the router?

> I have also tried putting the 192.168.0.x addy of the box as the DMZ
> Server  -  strill nothing. It COULD be of course that I'm not
confuring
> the VPN Server side correctly ! I've tried Windows 2000 Server and now
> using Windows 2000 Server.

Have you tried to connect from inside your network to see if it isnot a
VPN
server configuration issue?

You have RRAS as VPN server?
>from
- ping vpnserver
- telnet vpnserver 1723

where vpnserver is the IP address of your VPN server.

You must be connected when telnet-ing.

Check the authentication mode (clear text, MS-CHAP v2 or whatever ..)
Did you configure the VPN server using the wizard and selecting VPN
server,
or manualy?

BR,
Dan


----- Original Message -----
From: "Gareth Cook" <g@xxxxxxx>
To: <ukha_d@xxxxxxx>
Sent: Wednesday, June 04, 2003 2:32 PM
Subject: Fw: [ukha_d] Almost OT : ANyone got MS Windows VPN Server working
behind their NAT router ?


> I have a NetGear DSL Modem/Router DG814. I have tried port forwarding
> ports 1723 and 500 (for IPSEc, as a test) - no option for GRE(47) but
PPTP
> is a special option which just create a 1723 port forward.
>
> I have also tried putting the 192.168.0.x addy of the box as the DMZ
> Server  -  strill nothing. It COULD be of course that I'm not
confuring
> the VPN Server side correctly ! I've tried Windows 2000 Server and now
> using Windows 2000 Server.
>
> I cant even connect on the local LAN - just says my local computer
needs
> it's protocols configuring correctly. This is my work laptop which
also
> connects into IBM via our own IPSec/VPN Connection, so the laptop is
ok
!
>
> G.
>
>  Gareth Cook
>  BTPM North Region
>  IBM SWG - BTE Office - Lotus Park, Staines, TW18 3AG
>  Office: +44 (0)1784 445166 - Mobile: +44 (0)7980 445166
>  AIM Chat : TheBoyG - MSN Chat : chat@xxxxxxx
>  email: g@xxxxxxx
>
>
> ----- Forwarded by Gareth Cook/UK/IBM on 04/06/2003 12:30 -----
>
> Discussion
> Main Topic
>
> "Dan" <dtoma@xxxxxxx>
> Today 12:10
>
> .
> Subject:
> .
> Re: [ukha_d] Almost OT : ANyone got MS Windows VPN Server working
behind
> their NAT router ?
> .
> Category:
>
>
>
> Hi,
>
> Why don't you use a SSL connection to your web server.
> You can do basic authentication over SSL and then this issue is
solved.
>
> > Thing is , I'm not having much success. Never gets passed the
> > authentication piece.
> If you talk about PPTP then you need to pass two things in order to
works:
> - TCP port 1723
> - GRE protocol (47)
>
> If the second is not passed, the authentication failed.
> One easy way to solve this is to put your VPN server in DMZ.
>
> Please be more specific in order to be able to give you more help:
> - Type of VPN used
> - type of router
> - type of VPN server
>
> BR,
> Dan
>
> ----- Original Message -----
> From: "Gareth Cook" <g@xxxxxxx>
> To: <ukha_d@xxxxxxx>
> Sent: Wednesday, June 04, 2003 1:57 PM
> Subject: [ukha_d] Almost OT : ANyone got MS Windows VPN Server working
> behind their NAT router ?
>
>
> > Says it all really - I want a VPN Connection to home so I can
securely
> run
> > HA stuff without passing credentials in the clear.
> >
> > Thing is , I'm not having much success. Never gets passed the
> > authentication piece.
> >
> > Cheers !
> >
> > G.
> >
> >  Gareth Cook
> >  BTPM North Region
> >  IBM SWG - BTE Office - Lotus Park, Staines, TW18 3AG
> >  Office: +44 (0)1784 445166 - Mobile: +44 (0)7980 445166
> >  AIM Chat : TheBoyG - MSN Chat : chat@xxxxxxx
> >  email: g@xxxxxxx
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> > ** UKHA2004 BE THERE! ** - start planning now.
> >
> > http://www.automatedhome.co.uk
> > Post message: ukha_d@xxxxxxx
> > Subscribe:  ukha_d-subscribe@xxxxxxx
> > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > List owner:  ukha_d-owner@xxxxxxx
> >
> > Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
> >
> >
> >
>
>
>
>
> ** UKHA2004 BE THERE! ** - start planning now.
>
> http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to
http://docs.yahoo.com/info/terms/
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ** UKHA2004 BE THERE! ** - start planning now.
>
> http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to
http://docs.yahoo.com/info/terms/
>
>




** UKHA2004 BE THERE! ** - start planning now.

http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/




[Non-text portions of this message have been removed]