W2K VPN server - Special Configuration 1

[pmf71]

Guys...HELP!!!!!!

I am setting up a VPN server so our new 2nd office can connect thru it. I have the following setup:

Office 1 has the w2k server setup us primary domain controller. We have no backup domain controller.
Office 1 uses subnet 192.168.1.x, mask 255.255.255.0
Connection to internet is thru a pc(192.168.1.1) with kerio winroute 4.2, the adsl modem is setup as pass-thru so winroute can act as the router.
the server is 192.168.1.2, i have already set up port mappings in winroute so any vpn packets are sent straight to the w2k server.
office 2 will use 192.168.2.x, mask 255.255.255.0
Connection to internet is thru a draytek vigor 2600 (set up as a router), Office 2 has no backup domain controller.

I wish to connect the draytek vigor 2600 to the win2k vpn server in a lan-to-lan config. I have been able to get a connection, no problem, it's the routing in the w2k server that i cant get right. i cant get a response from either subnets (192.168.1.x-> 2.x and vice-versa)

I got a config example from draytek on how to connect a 2600 to a w2k vpn server in lan to lan set up, but that example used 2 NICs, the internal network nic and a dedicated internet nic. In my case i have only one physical nic, as the internet connection is routed thru the pc with winroute.

We can discuss things here in the forum, but you can also contact me at PAUL@DPS.NL. Thanks in advance, i appreciate any hints or tips!!!!

 

[MattWray]

Have you tried adding a static route in the Win2k Router? Try that and see if you can ping. If so, add one on the router at your remote site as well.....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[GlenJohnson]

Try adding a hosts file on the machines you want to connect. Do you have a router at the second site? Good luck.

Glen A. Johnson
Johnson Computer Consulting
MCP W2K



Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884
"Study not to know more, but better."
Lucius Annaeus Seneca (2 BC-65AD); Roman philosopher.

 

[pmf71]

Although I still appreciate any hints or comments, i have found a document in the microsoft knowledge base:

http://support.microsoft.com/default.aspx?scid=kb;en-us;252735

It describes how to use IP Security (IPSec) policies to configure a lan to lan tunnel with encryption. That's bingo for me, exactly what i want. So it seems i was looking in the wrong direction. The method i was trying (Standard VPN Server port) is ok for single pc vpn connections, but isnt suitable for routing subnets.
Thanks anyway for the interest, i'll elt you guys know the new method works.

 

[MattWray]

Sorry, I thought you were already using IPSec. Here's a link from Linksys for a Router to Windows IPSec VPN.

http://www.linksys.com/support/support.asp?spid=86

Pretty good, maybe you can just change out the Linksys settings for your Draytec....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com