Manually Configure NAT and VPN together 1

[cranebill]

Ok through the RRAS wizards i can configure NAT and i can also configure VPN. Problem is its either or... not both. How can i configre both to work at the same time?

Bill

 

[cranebill]

No i do not have novell at all so i should be good to go then correct? Now with this VPN connection i should be able to map drives from home to the office correct once the VPN is connected? If this is true could i possible make my home conputer part of the domain and control Administrative things from home as well... i dont know much about VPN just trying to see what extent i can take it.

Bill

 

[MattWray]

Yes, you are correct on all accounts....


Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[cranebill]

Thanks so much i really appreciate all the help.


Bill

 

[cranebill]

ok another question... i am at home now and am able to connect fine... however when i go to map to a drive it doesnt find it... is there a different way i need to map it over a VPN connection?

Bill

 

[MattWray]

The drive you are trying to map is shared? (Had to ask) It is probably a DNS thing, tough to get that working over the VPN. Try this, NET USE Z: \\<serverIPaddress>\sharename /PERSISTENT:YES

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[cranebill]

Yeah the folder is shared... its the same mapping i have on my workstations at work. I did try using the IP to map yesterday... not using the &quot;net use&quot; command but by right clicking My Computer then Map network Drive then using \\x.x.x.x\sharename Still didnt connect. Is using the &quot;net use&quot; command better to use in this case? I have used this command in a bat file for a logon script to map drives before

Bill

 

[GWINTO]

Have you got a hosts file in place? I've just caught this thread so excuse me if I repeat stuff, what OS you using on the client?

 

[cranebill]

What do you mean by &quot;Hosts file in place&quot;? Client is XP Pro. Server is 2000 Advanced Server (DC). The files that I am trying to access at home are the same files that my current workstation at work is mapped to. So i know that there are shares etc.

Bill

 

[cranebill]

In another post someone said i may need this when using PPTP which is what i am using. What is all this and where would this need to be set up?

Likely going to need to at least be aware of the potential for needing GRE with PPTP and the necessity of allowing AH and ESP (AH - authentication protocol, ESP - encrytption protocol) for IPSec, in addition to the UDP IKE (Internet Key Exchange) port 500 that you mentioned.

GRE - Protocol type 47
AH - Protocol type 50
ESP - Protocol type 51

Bill

 

[MattWray]

You don't need to worry about that, that has more to do with making the connection.
Question, are the shares you are trying to map on the VPN server? It may be an IP or routing issue...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[GWINTO]

A host files gives a static mapping for IP address to server/client name.

Navigate to windows/system32/drivers/etc the file is called hosts and has no prefix, open the file using word and add the following entry after all the hashes (read the content if you want to know specificaly how it works!)

10.0.0.1 servername

where 10.0.0.1 is your server IP and servername is your servers name.

Now when you map \\servername\sharename you should be OK

 

[MattWray]

I don't think this will correct his problem. If he cannot map using an IP address, there is more than name resolution problems going on...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[cranebill]

Yes all the shares I am trying to connect to are on the central server. All the workstation data is saved on the server for availibility to back up. Basically this home connection will be just another workstation so to speak mapped just the way the workstations are. I even tried to connect to the domain once i was connected via VPN... couldnt do that either.

Could my ISP have something to do with this? I think if it did i wouldnt be able to make the connection at all... i am connecting via cable modem.



Bill

 

[GWINTO]

Can you log in using VPN?
Requires clearence on 1723 if you are using a firewall

Can you ping the server once you are logged in?

Do you have Internet firewall turned on?

 

[GWINTO]

Can you log in using VPN?
Requires clearence on 1723 (PPTP) if you are using a firewall

Can you ping the server once you are logged in?

Do you have Internet firewall turned on?

 

[cranebill]

I can log into the VPN connection yes, which is why i find all this strange. No im not running any firewall and i can ping the server whether im connect to VPN regardless... im always on the net via broadband.

Bill

 

[GWINTO]

Can you see the share via My network Places? what is the exact error messge that you're getting?

Did you try the host file thing? I had this issue and that worked for me.

 

[cranebill]

Well to get the exact error message i will have to get that tonight... im not at home to try these things... it just couldnt find the folder. No i have not tried that but it cant hurt so i will try it.

Bill

 

[cranebill]

Which Ip would i use in that file Private or Public?

Bill

 

[GWINTO]

Once you have VPNed in its private, its as if you are connected to the LAN