NAT and VPN passthrough

[Speng]

I've set up a 2003 server to be my firewall/router Using NAT routing. Everything works fine, but I can't seem to find anything to allow VPN passthrough (upnp, ipsec, pptp). Is there a way to allow these passthroughs?

 

[Speng]

Sorry, replied too fast....I am using Win XP on all clients that I've tried to access VPN. I'm currently reinstalling my Win2K3 server (40 beeeeellion changes that didn't help), so I can't test the VPN client on the server right now.

I always update from windowsupdate everytime I install a new system and set the auto download feature, so that isn't the issue.

 

[mickeytech]

I just upgraded my client OS to Windows Server 2003. But still couldn't connect to a VPN server through my NAT server which is running Windows 2000 Server with SP4.

Any input would be appreciated.

 

[mickeytech]

Is Paul still out there or anybody who has any clue to bring this issue to a conclusion if not a solution?

Thanks again!

bigears

 

[mickeytech]

Hellooooooooooooooooooooooooooooooooooo!
Help...

 

[paul123456]

sry its been so long guys...been real busy..listen mickey i got a question..can u access this vpn server internally? for example can u add the vpn client with an address of 192.168.1.1 or whatever your internal ip is?

Thanks, PAUL

 

[mickeytech]

Thank you, Paul. I am glad you are back.
The VPN server I am try to connect is hosted by AT&T. I have no problem connecting to it if I bypass my NAT server. The only time I can't connect is using a client behind the NAT...

Thanks.

 

[paul123456]

Mickey it might be that both you and the client have the same private subnet mask. Have you tried to vpn into another server with another subnet? another question. is AT&T using ipsec? is it pptp or l2tp? also what does the error tell you when you try to connect? and also if you can check the application event viewer log for any event id's and messeges?

Thanks, PAUL

 

[mickeytech]

Paul,

I called AT&T and was informed that they are using l2tp. But since I am using broadband connection, IPSEC drivers are needed and loaded by the AT&T client software at the client workstation to initiate the tunneling.

What do you mean by 'both you and the client...'? I am the client trying to connect to a AT&T VPN server...
I will check the event viewer, too...

 

[mickeytech]

Paul,

I installed the ATT VPN client on the NAT Server. It worked from the NAT server. However, all other clients couldn't even connect to the internet due to the VPN tunneling on the NAT server. Any idea how to setup the VPN tunneling from a NAT client going through the NAT server? Thanks.

 

[mickeytech]

Again, ATT was saying that I need to open those ports:
UDP 500, TCP 50, 5080, 379... on the NAT Server/Router.

My question is HOW? ATT couldn't give me an answer.

 

[mickeytech]

I tried mapping those ports on the NAT/Router public interface card configruations to the internal private interface, but STILL couldn't get the tunneling to go through the NAT. Any suggestions would be greatly appreciated.