Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Remote a VPN connected client? 2
- Thread starter RustyAfro
- Start date
-
1
- #2
-
1
- #3
ShackDaddy
MIS
Depends on the VPN setup. Sometimes the client networking is altered by the VPN so that the default gateway of the remote network is used as the gateway of the client. In this setup, connecting to the client over the public internet would be a problem, since the client is connectively "blindered" and can't accept other connections.
In addition, you're dealing with the upload speeds on both links being slow, plus the VPN overhead, so even if you can connect, performance is usually pretty poor.
Best to try and alter the VPN so that the local default gateway is used, and then configure the client's broadband router to allow RDC connections in (make sure user has strong passwords), and connect to it via the public internet. Then you can troubleshoot issues involving the VPN without being disconnected or having the RD connection slowed down by VPN overhead.
ShackDaddy
Shackelford Consulting
In addition, you're dealing with the upload speeds on both links being slow, plus the VPN overhead, so even if you can connect, performance is usually pretty poor.
Best to try and alter the VPN so that the local default gateway is used, and then configure the client's broadband router to allow RDC connections in (make sure user has strong passwords), and connect to it via the public internet. Then you can troubleshoot issues involving the VPN without being disconnected or having the RD connection slowed down by VPN overhead.
ShackDaddy
Shackelford Consulting
- Thread starter
- #4
The VPN is setup through the SBS Servers wizard...and the client can connect perfectly to the server through that VPN. I do not have ISA installed yet either.
nsanto17, can you provide instructions for how to obtain that IP the server gave and how you would connect to it from RWW (or are you doing it through something else?)
Shackdaddy, what you described sounds appealing, but I wouldn't know where to start. The VPN client downloaded the connection tool from RWW and installed it, then connected. I did see that the installation created a VPN connection in the clients Network Connection. If it isn't too lengthy to explain, can you provide instructions for that process?
nsanto17, can you provide instructions for how to obtain that IP the server gave and how you would connect to it from RWW (or are you doing it through something else?)
Shackdaddy, what you described sounds appealing, but I wouldn't know where to start. The VPN client downloaded the connection tool from RWW and installed it, then connected. I did see that the installation created a VPN connection in the clients Network Connection. If it isn't too lengthy to explain, can you provide instructions for that process?
ShackDaddy
MIS
On Nsanto's solution, check the DHCP lease list on the server. You will see that 8 or 10 addresses have been set aside for the RRAS/VPN clients. One of those addresses is being used by the remote client, and you should be able to RDC to that IP. If you go that route, you can ignore what I said about the client-side VPN settings and the default gateway. As long as it works ok.
To find the option I was talking about, get properties on the VPN Connection and go to the Networking Tab -> TCP/IP Properties -> Advanced and you'll see the "Use default gateway on remote network" option which is checked by default.
ShackDaddy
Shackelford Consulting
To find the option I was talking about, get properties on the VPN Connection and go to the Networking Tab -> TCP/IP Properties -> Advanced and you'll see the "Use default gateway on remote network" option which is checked by default.
ShackDaddy
Shackelford Consulting
Daddy is correct. check the DHCP lease list
You can also run IPCONFIG /ALL on the machine that VPNed into your server to get the addres.
There is also a way to have your DCHP server give a specific address to only that one machine. You will need the MAC address to do this.
You can also run IPCONFIG /ALL on the machine that VPNed into your server to get the addres.
There is also a way to have your DCHP server give a specific address to only that one machine. You will need the MAC address to do this.
- Thread starter
- #7
I'd like to try nsanto17's method first, then shackdaddy's so I can understand both.
Found the lease list and did an ipconfig /all on the vpn workstation to get the ip.
I then clicked the offer remote assistance icon in the server and typed the ip, but no luck.
I checked the workstation and allow remote desktop was off so I turned it on, but, the only user options to use it were local to that workstation name. It doesn't allow me to add domainname\user. The workstation was never joined to the domain, it just connects to the VPN.
Do I have to join it to the domain first before I can remote it? Also, am I trying to remote it correctly by using the "Offer remote assistance" link?
Found the lease list and did an ipconfig /all on the vpn workstation to get the ip.
I then clicked the offer remote assistance icon in the server and typed the ip, but no luck.
I checked the workstation and allow remote desktop was off so I turned it on, but, the only user options to use it were local to that workstation name. It doesn't allow me to add domainname\user. The workstation was never joined to the domain, it just connects to the VPN.
Do I have to join it to the domain first before I can remote it? Also, am I trying to remote it correctly by using the "Offer remote assistance" link?
- Thread starter
- #8
ShackDaddy
MIS
- Status
Similar threads
- Locked
- Question
- Locked
- Question
