VPN Setup 1

[SpecSys]

Is it possible to setup a VPN through Windows 2000 Professional or does that require 2000 server software or some other hardware like a Symantec Firewall/VPN?

I couldn't figure out which forum to use for VPN setup, if anyone has some VPN guidance, let me know please

 

[jeremybarker]

Sure, goto network and dial up connections, then open make new connection. Select next, then select the bullet accept incoming connections and next. Even though there is no network connection available to select here, select next w/o checking anything. Then leave the default allow virtual private connections selected and hit next. Select a user to connect to the vpn and next. If you are going to be connecting to more than one computer on the vpn and you're not using DHCP, you will have to configure the IP range by selecting the properties button, if not, then select next. Name your connection and your done.
HTH

 

[SpecSys]

I assume this would need to be on a machine with a static IP address, correct? If so, once its set up, how do I actually dial in from another machine? What do I type in my browser or how do I set up the Network Connection?

Also, is there any security features I should be working with on the VPN box? The network we have is simply a star network of about 35 machines. Windows NT and Linux servers (4). And one "server" running simply W2k Pro which is where I want the VPN set up. That machine is already set up with FTP responsibilities and therefore has a static IP.

BTW-Thanks for the quick help!

 

[jgoodman00]

No. If you goto

http://www.dyndns.org,

you can install a small app which will notify keep your ip address up to date. Anybody can then enter your dns name, & will be forwarded successfully.

You do not 'dial in' to a VPN machine. You establish a connection to the internet (both machines need this), & then enter the ip address, or dns name.

VPN is pretty secure as standard. Since you are using FTP, one would assume all service packs & critical updates are current... James Goodman

http://www.james-goodman.co.uk

 

[SpecSys]

All security is current and I am also running ZoneAlarm Pro.

Do you enter the IP address in http format or simply type in the number?

 

[jgoodman00]

Zone alarm pro could cause a problem, & you might need to modify the security settings for it.

When setting up the vpn you simply enter the number, or domain...

James Goodman

http://www.james-goodman.co.uk

 

[SpecSys]

Ok, now a possibly easy question: I setup everything as dictated and it was all easy to do, just as described...but where do I go on the client computer to connect to it? If I enter the IP in xxx.xxx.xxx.xxx in the browser it doesn't find it...if I enter it xxx.xxx.xxx.xxx in the Add New Network Place it says it is an invalid address format...it wants an http:// or Ftp:// or \\server\share format. How do I connect to my new VPN?

 

[SpecSys]

OK, I'm ashamed to call myself a network admin...

I created a new connection in the dial up and networking area, and it looks correct and everything, but the Connecting to VPN .... box seems stalled. Is there anything I could have missed? I have configured the Firewall correctly I believe.

 

[jgoodman00]

Have you checked the event log, for messages?

Are any error messages encountered when attempting to connect?
What happens if you leave it attempting to connect?
What method of connection to the internet is implemented from each computer? (A router will complicate things at this stage).


Setting up a VPN is actually very simple, but things such as routers/firewalls etc complicate the process. Also, are both client & server running the same OS?


James Goodman

http://www.james-goodman.co.uk

 

[jeremybarker]

Are you testing this vpn connection from a intranet location, or internet? Do you have a trusted zone setup for your intranet? What are the custom internet zone settings you have allowed?

 

[SpecSys]

Trusted zone is set up for intranet, and Zone Alarm has no instances of blocked IPs during the time I was testig, it appears to NOT be the problem. I have tested from both the internal and the external net. At the office over the intranet, it just seems to hang. In 5 minutes left on, it never gave a message or changed from the "connecting" box. At home from my dial-up it gives me a "remote machine did not answer" in about 15 seconds.

We do have a router installed which distributes the wireless internet connection.

All machines tested so far have been running win2k pro, including the vpn machine. The vpn machine has a public, static IP. It is connected to the network through a personal hub which then feeds it to the router. The vpn machine also has a second NIC which feeds it to the LAN.

 

[SpecSys]

Ok, now I do get a "Computer didn't answer" message from the Intranet as well. I changed the settings in my client to dial the LAN IP (192.168.x.x) and this worked just fine. I assume it must be the router, although I don't know how to troubleshoot that.

 

[SpecSys]

After some time the ZoneAlarm came up with a request to add an allowed service. I accepted it and now it works from both IPs, but only inside the intranet, still does not work externally. I also made a double check of the IP line and it does not pass through a router, but does indeed pass through a Cisco router at the ISP main office. THey say it should not matter because they use the same router on their own VPN.

 

[SpecSys]

I'm just going to keep talking to myself with updates in case anyone has some more help...

It looks like it was the firewall, haven't decided how to get past that yet. But with the FW disabled, I can log in from the LAN and from an external computer. But I cannot see any computers on the network from external. Computers Near Me tells me that the list of servers for the workgroup is unavailable. I have tried assigning the pc its own IP that I know is free on the LAN, and I have changed the workgroup to meet that of the LAN workgroup I want to connect to. No luck so far.

I was under the impression that a VPN makes you totally on the network and able to see other computers, browse resources, print, whatever. Once I have successfully connected to the VPN, how do I go about retrieving files from my work computer and such?

 

[jeremybarker]

To answer your last question, when you connect to a VPN it will connect you to the network that is the VPN is setup on. Try going to the properties page of the VPN connection. Select the networking tab, then select TCP/IP properties. Since it sounds like your LAN has static IPs, you will have to specify what range of addresses the caller will be able to connect to. Also make sure that the option to allow callers to access my LAN is selected. So far as ZA, I would imagine that you would have to change settings that would allow EAP and or IPsec communication. Not sure on this one.