Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Manually Configure NAT and VPN together 1

Status
Not open for further replies.

cranebill

IS-IT--Management
Jan 4, 2002
1,113
US
Ok through the RRAS wizards i can configure NAT and i can also configure VPN. Problem is its either or... not both. How can i configre both to work at the same time?

Bill
 
Don't use the wizard, do it manually. Lets pretend you set up VPN but not NAT. This is off the top of my head, to set up NAT, you need to add a new routing protocol, NAT. The dialogs should step you thru it. To get there, I think it's right-click the General tab within IP routing...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

 
Ok it did install it but still needs to be configured manually..... i undid vpn to see how the wizard set up Nat manually and i tried to do the same... but its not working :( any ideas?

Bill
 
Ok pick a forum this one or the other one.... :)

Bill
 
Ok so lets configure it ... i will disable RRAS and hit the manually configure radio button... is there an order in which we need to do this... I mean as far as NAT and VPN goes... if there is no order needed then i would prefer to set up NAT first so the office can still send recieve emails :)

Ok so now when i configure manually what avenue will we be taking?

Bill
 
Once you start, all you will need to do is add NAT as I described before. Once NAT is running, you may want to add a static route to the Internet. So is your server the router for the network? Sorry if you've already told me...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

 
I did it like that earlier but the Interfaces need to be manually configured somehow... and i do not know how to manually configure them through NAT

Bill
 
Ok, if you right-click your servername in the RRAS snap-in, make sure the radio buttons for Remote Access server and Network Router are clicked. Once you have NAT installed, you will need to add the interfaces. Right click NAT-> New Interface. When you choose the Interfaces, you will need to know which one is connected to the LAN and which to the LAN. Set them up with the default values. That should have your NAT all set up. If I forgot something, tell me what is not working and we'll figure it out.

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

 
Ok now that is set up and it is working for i am back at my workstation and not the server... weird though i did this same thing earlier and it didnt work... although i did it when i had vpn set up by the wizard...

Bill
 
OK, under your servername, you should see ports. I used PPTP for my Windows based VPN, so I can only go off that now. If you have the PPTP and L2TP ports, right-click the ports and select properties(or configure?). You should remove the ports you will not use. If that is set up, choose an account you want to test with. Go to the properties for that account-> dial in tab, and enable dial-in access. Then try and connect from within the LAN. If you can connect, try from outside the LAN....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

 
Will "dial in" also work via internet? We arent connecting via phone lines to the vpn connection we are connecting via cable modem.
 
ok i made a VPN connection on my workstation... put in to connect to the servers public ip.. when i just tried logging in with "username" i got error 619 a connection to the remote server could not be established. When i tried with username@sample.com i get error 721 The remote server did not respond.... there are 5 ports for PPTP on the server that say inactive...

Dang workstation is trying to dial out lol

Bill
 
You don't want to connect to the WAN interface while on the LAN. The connection would have to go out and come back in, which it can't.
Specify the internal interface for the connectoid and test. If you can connect from the LAN, the VPN is set up correctly, on to test the WAN....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

 
ok i put the private ip in...... said not allowed to dial in... so i changed my profile to allow it... now it logs me in says tcp/ip protocol is fine... ipx/spx isnt configured properly. do i need ipx/spx?

Bill
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top