Manually Configure NAT and VPN together 1

[cranebill]

Ok through the RRAS wizards i can configure NAT and i can also configure VPN. Problem is its either or... not both. How can i configre both to work at the same time?

Bill

 

[cranebill]

10.0.0.1 servername

so on my private network it would be

192.168.0.1 servername

?

 

[GWINTO]

Correct, once you are logged in via VPN its like being on the end of a piece of CAT5 connected to the LAN

 

[cranebill]

Ok i did that and will try it when i get home... thanx

Bill

 

[MattWray]

You say the server has a public IP? And it is not running a firewall?!?

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[cranebill]

Firewall is in the router.....

Bill

 

[MattWray]

Ok, i forgot. To remember, Internet-> Router-> Server (also acting as network router)-> LAN ? What type of router is it? The firewall in the router could be blocking your request...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[cranebill]

Cisco 1720.... if it is blocking the request how can i fix that?

Bill

 

[MattWray]

No, now that I think about it that can't be it. Once the tunnel is created, it goes inside the firewall. When you try and map the drive using the IP address, which one did you use, the external or internal? If you used the internal, and it didn't work, I bet you're not getting an IP for the LAN....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[MattWray]

Run an IPCONFIG /ALL once connected and post the output. And also what address range you use at work...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[cranebill]

When i did the Ip i did the IP supplied by the ISP... which i know im hitting for i made the VPN connection.

Should i have used the Internal?

Bill

 

[cranebill]

Ok i will have to do that when i get home.... the addresses for work are 192.168.0

When i run IP config at home should my vpn connection have this same configuration?

Bill

 

[cranebill]

Well while im at work my DHCP IP Range is 192.168.0.2 Through 192.168.0.200 how can i tell from here what Ip addresses the VPN connection would set?

Bill

 

[cranebill]

ok here are the results..... drum role please lol

Microsoft(R) Windows DOS
(C)Copyright Microsoft Corp 1990-2001.

C:\DOCUME~1\BIOHAZ~1>ipconfig /all

Windows IP Configuration


PPP adapter Test:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 68.1.1.10
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.0.1


K now what lol

Bill

 

[MattWray]

You are not receiving an IP for the LAN. Right-click you servername in the RRAS snap-in, and choose properties. On the IP tab, you will see This server can assign IP addresses by using. And at the bottom you will see the adapter to use if you need DHCP etc. If you are using a DHCP server that is other than the VPN server, you will have to either use a Static Pool (my suggestion), or add the DHCP relay agent....
You could also map using the public IP, but that just makes me nervous....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[GWINTO]

Alternativley on the TCP settings for your adapter select the 'alternate configuration' tab and set your self a static IP for the LAN on the same subnet but outside the DHCP scope. Set an exclusion range in DHCP if the whole subnet is allocated

 

[cranebill]

Ok... let me see if i get this straight. On the Adapter setting you talked about it says Let RAS decide... or i can choose from public or provate NIC. Which of these 3 settings should i use? In the middle of this screen it says that i can use DHCP or Static. So I should use Static...give settings for my private LAN.... then exclude the ip addresses from my DHCP pool?

Bill

 

[GWINTO]

That would work fine, as would selecting DHCP and leaving TCP on the client as default.

 

[cranebill]

Should I let RAS decide adapter or should i manually set it to public or private.

Bill

 

[cranebill]

Ok another question.... on this screen i enabled static pool... entered the ip rannge in which to set clients.... this line item has the following:

From To # IP Address Mask
192.168.0.2 192.168.0.9 8 192.168.0.128 255.255.255.128

Now i know the what the "From", "To", and Number are.
What is the IP address and the Mask... i mean i know what they are but how do they apply here and another question is this mask is 255.255.255.128... the Subnet Mask of my Private LAN is 255.255.255.0.

Will this create an issue?

Bill

 

[MattWray]

Yes, you need to use the same subnet as on your LAN. I would change it to class C and try the IPCONFIG again and see if you get an IP. If you do, you're on your way...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com