Remote Desktop through VPN Connection

L

Leythos

Leythos said:
[snip]
Here is my PPP adaptor for VPN info.
IP address: 192.168.1.228
Subnetmask: 255.255.255.255
Default Gateway:
DNS server: 127.0.0.1

When I VPN (PPTP) into a server that is running RAS and have it setup to
pass-through PPTP sessions on 1723 TCP and (with linksys products 47 TCP
- since they don't support Protocol 47 properly without a port map) I
show the following:

IP 192.168.10.108
Mask 255.255.255.255
Default GW 192.168.10.108

If you don't have a GW address you are not going to route on the remote
network.

Try this - RD into the first server, from the first server RD into the
other servers and let us know if that works.

How you can add GW on remote VPN server so when VPN assign IP address so you
get GW. Only one thing happen that I can only ping gateway after make VPN
connection but not any other sever which are on same network. I don't know
what's going on.
I can't do RD with any server. I do have port 3389 forward in my router.

OK, first, you need to SELECT the Use Default Gateway on Remote network
option - I think you turned if off a few posts ago.

I have the Windows 2003 (you can do the same with 2000) server running
Remote Access and have the users setup for RAS based on their DIAL-IN
option settings in their profiles.

My computer in the remote location (not the office where the server is
located) is IP 192.168.3.5 / 255.255.255.0 / 192.168.3.2. I have a real
firewall, but I have a PPTP rule that permits my IP to pass PPTP
sessions.

I have a D-Link DI-808HV setup with TCP/UDP/1723 forwarded inbound to
the server at 192.168.200.10. PPTP Pass-through is enabled.

The servers only IP is 192.168.200.10 / 255.255.255.0 / 192.168.200.1

There are a few workstations at 192.168.200.70~79 fixed IP, same subnet
and same DGW.

When I do a VPN, I use the New Connection Wizard, use all the defaults,
and use the PUBLIC IP for the address. Once inside I get a single IP
from the server's DHCP pool (I set it up that way).

Now, on the inside, after the VPN connects from my computer to the
server at the office. I can ping computers (server and workstations) by
name, also by IP, and do RD to the server. I can also connect via VNC to
any server or workstation.

If you can't do this, then you don't have your network setup properly.

You should have your servers in the same subnet and same default gateway
using a private IP. Any outside connection to the servers, other than
the VPN, should be forwards from the PUBLIC IP to the PRIVATE IP via
NAT. You should be able to forward TCP/1723 in-bound to the VPN server
and then ping it by NAME "AND" by IP. Once you can ping it, you should
be able to ping the other servers, at least by IP, and by Name if
properly configured.

If you can't do this, you really need to rebuild your network - or
remove any personal firewall products you are running on your local
computer and servers.
 
H

Hafeez Ch

Leythos said:
Leythos said:
[snip]
Here is my PPP adaptor for VPN info.
IP address: 192.168.1.228
Subnetmask: 255.255.255.255
Default Gateway:
DNS server: 127.0.0.1

When I VPN (PPTP) into a server that is running RAS and have it setup to
pass-through PPTP sessions on 1723 TCP and (with linksys products 47 TCP
- since they don't support Protocol 47 properly without a port map) I
show the following:

IP 192.168.10.108
Mask 255.255.255.255
Default GW 192.168.10.108

If you don't have a GW address you are not going to route on the remote
network.

Try this - RD into the first server, from the first server RD into the
other servers and let us know if that works.

How you can add GW on remote VPN server so when VPN assign IP address so you
get GW. Only one thing happen that I can only ping gateway after make VPN
connection but not any other sever which are on same network. I don't know
what's going on.
I can't do RD with any server. I do have port 3389 forward in my router.

OK, first, you need to SELECT the Use Default Gateway on Remote network
option - I think you turned if off a few posts ago.

I have the Windows 2003 (you can do the same with 2000) server running
Remote Access and have the users setup for RAS based on their DIAL-IN
option settings in their profiles.

My computer in the remote location (not the office where the server is
located) is IP 192.168.3.5 / 255.255.255.0 / 192.168.3.2. I have a real
firewall, but I have a PPTP rule that permits my IP to pass PPTP
sessions.

I have a D-Link DI-808HV setup with TCP/UDP/1723 forwarded inbound to
the server at 192.168.200.10. PPTP Pass-through is enabled.

The servers only IP is 192.168.200.10 / 255.255.255.0 / 192.168.200.1

There are a few workstations at 192.168.200.70~79 fixed IP, same subnet
and same DGW.

When I do a VPN, I use the New Connection Wizard, use all the defaults,
and use the PUBLIC IP for the address. Once inside I get a single IP
from the server's DHCP pool (I set it up that way).

Now, on the inside, after the VPN connects from my computer to the
server at the office. I can ping computers (server and workstations) by
name, also by IP, and do RD to the server. I can also connect via VNC to
any server or workstation.

If you can't do this, then you don't have your network setup properly.

You should have your servers in the same subnet and same default gateway
using a private IP. Any outside connection to the servers, other than
the VPN, should be forwards from the PUBLIC IP to the PRIVATE IP via
NAT. You should be able to forward TCP/1723 in-bound to the VPN server
and then ping it by NAME "AND" by IP. Once you can ping it, you should
be able to ping the other servers, at least by IP, and by Name if
properly configured.

If you can't do this, you really need to rebuild your network - or
remove any personal firewall products you are running on your local
computer and servers.

Where you turn on DGW on remote computer. I check all RAS option but
couldn't find it.
 
L

Leythos

Where you turn on DGW on remote computer. I check all RAS option but
couldn't find it.

It's on your local computer, the one you are VPN'ing from - it's under
the TCP/IP Advanced settings for the VPN connection.
 
H

Hafeez Ch

Leythos said:
It's on your local computer, the one you are VPN'ing from - it's under
the TCP/IP Advanced settings for the VPN connection.

This option is checked and I am not getting GW on my VPN connection. I use
another computer and has same thing. I rebuilt VPN server and has only AD
and RAS. I can only ping DGW and VPN server but not any other servers which
are also on same network. Other computer I use was connected directly with
cable modem mean not using NAT. Thanks for help.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top