[beginner] Connecting XP into 2 LAN

F

Francesco

Hi all,
I have the following problem: We have a VPN client which connects to
another LAN with IPSec.
Meanwhile it's connected I need to give access to shared directories to
other Pc in the LAN.

So I decided to buy another ethernet card and installed it on the XP
Box.

What I would like to do is :

[ LAN ]----Tcp/IP------> [ XP Box sp 2 ] ------IPSec-----> [VPN]

Unfortunately when I connect to the VPN my LAN is not visible anymore.
I have tried to bridge connections, from the Network Control Panel but
as soon as I do it the VPN client disconnects because of security
threat.

I understand that there are some security constraints because of them
the VPN could be exposed to a remote LAN, but I just need that my XP
Box can both --access vpn--, and --be reachable from the LAN--.

Is it possible to do it?
Thanks a lot
Francesco
 
R

Robert L [MVP - Networking]

Assuming you want to have IPSec connecting to a remote site while the same computer connecting to another computer in the LAN, you don't need two NICs. Post the result of ipconfig /all here may help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Hi all,
I have the following problem: We have a VPN client which connects to
another LAN with IPSec.
Meanwhile it's connected I need to give access to shared directories to
other Pc in the LAN.

So I decided to buy another ethernet card and installed it on the XP
Box.

What I would like to do is :

[ LAN ]----Tcp/IP------> [ XP Box sp 2 ] ------IPSec-----> [VPN]

Unfortunately when I connect to the VPN my LAN is not visible anymore.
I have tried to bridge connections, from the Network Control Panel but
as soon as I do it the VPN client disconnects because of security
threat.

I understand that there are some security constraints because of them
the VPN could be exposed to a remote LAN, but I just need that my XP
Box can both --access vpn--, and --be reachable from the LAN--.

Is it possible to do it?
Thanks a lot
Francesco
 
F

Francesco

Hi Robert, thanks for your reply. I have cut and paste the ipconfig
/all before and after connecting to vpn.
I have cancelled only the public dns address of our company for
security reasons.
Here it is: hope you can give me a clue. Thanks again
Francesco

======== BEFORE CONNECTING TO VPN ======================

Host name . . . . . . . . . . . . . . : xxxxxxxxxx
Suffisso DNS primario . . . . . . . :
Tipo nodo . . . . . . . . . . . . . . : Ibrido
Routing IP enabled. . . . . . . . . : No
Proxy WINS enabled . . . . . . . . : No
Elenco di ricerca suffissi DNS. . . . : xxx.xxx.it
xxx.xxx.it
Ethernet card for (LAN):

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : Intel(R) PRO/100 VE
Network Conn
ection
Hardware address. . . . . . . . . . . : 00-0F-FE-06-C1-18
DHCP enabled. . . . . . . . . . . . : No
IP Address. . . . . . . . . . . . . : 10.2.24.31
Subnet mask . . . . . . . . . . . . . : 255.255.0.0
Gateway predefinito . . . . . . . . . : 10.2.1.1
Server DNS . . . . . . . . . . . . . : 10.2.1.2
10.2.1.5
Server WINS primario . . . . . . . . : 10.2.1.5
Server WINS secondario . . . . . . . : 10.2.1.2

Ethernet card for (LAN) 3:

Suffisso DNS specifico per connessione: xxx.xxx.it
Descrizione . . . . . . . . . . . . . : D-Link DFE-528TX PCI
Adapter
Hardware address. . . . . . . . . . . : 00-15-E9-F1-86-BF
DHCP enabled. . . . . . . . . . . . : yes
Configurazione automatica abilitata : yes
IP Address. . . . . . . . . . . . . : 10.2.21.250
Subnet mask . . . . . . . . . . . . . : 255.255.0.0
Gateway predefinito . . . . . . . . . : 10.2.1.1
Server DHCP . . . . . . . . . . . . . : 10.2.1.2
Server DNS . . . . . . . . . . . . . : 10.2.1.5
10.2.1.2
Server WINS primario . . . . . . . . : 10.2.1.2
Server WINS secondario . . . . . . . : 10.2.1.5
Lease ottenuto. . . . . . . . . . . . : venerdì 17 novembre
2006 2.34.30

lease expiry . . . . . . . . . . . : lunedì 27 novembre 2006
2.34.30





======= WHEN CONNECTION TO VPN IS ESTABLISHED =====================

Configurazione IP di Windows

Host name . . . . . . . . . . . . . . : xxxxxxxxx
Suffisso DNS primario . . . . . . . :
Tipo nodo . . . . . . . . . . . . . . : Ibrido
Routing IP enabled. . . . . . . . . : No
Proxy WINS enabled . . . . . . . . : No
Elenco di ricerca suffissi DNS. . . . : xxx.xxx.it
xxx.xxx.it

Ethernet card for (LAN):

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : Intel(R) PRO/100 VE
Network Con
ection
Hardware address. . . . . . . . . . . : 00-0F-FE-06-C1-18
DHCP enabled. . . . . . . . . . . . : No
IP Address. . . . . . . . . . . . . : 10.2.24.31
Subnet mask . . . . . . . . . . . . . : 255.255.0.0
Gateway predefinito . . . . . . . . . : 10.2.1.1
Server DNS . . . . . . . . . . . . . : 10.2.1.2
10.2.1.5
Server WINS primario . . . . . . . . : 10.2.1.5
Server WINS secondario . . . . . . . : 10.2.1.2

Ethernet card for (LAN) 3:

Suffisso DNS specifico per connessione: xxx.xxx.it
Descrizione . . . . . . . . . . . . . : D-Link DFE-528TX PCI
Adapter
Hardware address. . . . . . . . . . . : 00-15-E9-F1-86-BF
DHCP enabled. . . . . . . . . . . . : yes
Configurazione automatica abilitata : yes
IP Address. . . . . . . . . . . . . : 10.2.21.250
Subnet mask . . . . . . . . . . . . . : 255.255.0.0
Gateway predefinito . . . . . . . . . : 10.2.1.1
Server DHCP . . . . . . . . . . . . . : 10.2.1.2
Server DNS . . . . . . . . . . . . . : 10.2.1.5
10.2.1.2
Server WINS primario . . . . . . . . : 10.2.1.2
Server WINS secondario . . . . . . . : 10.2.1.5
Lease ottenuto. . . . . . . . . . . . : venerdì 17 novembre
2006 2.34.3

lease expiry . . . . . . . . . . . : lunedì 27 novembre 2006
2.34.30

Ethernet card for (LAN) 2:

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : Cisco Systems VPN
Adapter
Hardware address. . . . . . . . . . . : 00-05-9A-3C-78-00
DHCP enabled. . . . . . . . . . . . : No
IP Address. . . . . . . . . . . . . : 10.239.26.245
Subnet mask . . . . . . . . . . . . . : 255.0.0.0
Gateway predefinito . . . . . . . . . : 10.239.26.245
Server DNS . . . . . . . . . . . . . : 156.54.17.165
156.54.17.167










Robert L [MVP - Networking] ha scritto:
Assuming you want to have IPSec connecting to a remote site while the same computer connecting to another computer in the LAN, you don't need two NICs. Post the result of ipconfig /all here may help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Hi all,
I have the following problem: We have a VPN client which connects to
another LAN with IPSec.
Meanwhile it's connected I need to give access to shared directories to
other Pc in the LAN.

So I decided to buy another ethernet card and installed it on the XP
Box.

What I would like to do is :

[ LAN ]----Tcp/IP------> [ XP Box sp 2 ] ------IPSec-----> [VPN]

Unfortunately when I connect to the VPN my LAN is not visible anymore.
I have tried to bridge connections, from the Network Control Panel but
as soon as I do it the VPN client disconnects because of security
threat.

I understand that there are some security constraints because of them
the VPN could be exposed to a remote LAN, but I just need that my XP
Box can both --access vpn--, and --be reachable from the LAN--.

Is it possible to do it?
Thanks a lot
Francesco

------=_NextPart_000_002B_01C70962.BC303770
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Google-AttachSize: 2251

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2963" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV>Assuming you want to have IPSec connecting to a remote site while the same
computer connecting to another computer in the LAN, you don't need two NICs.
Post the result of ipconfig /all here may help.</DIV>
<DIV><BR>Bob Lin, MS-MVP, MCSE &amp; CNE<BR>Networking, Internet, Routing, VPN
Troubleshooting on <A
href="http://www.ChicagoTech.net">http://www.ChicagoTech.net</A> <BR>How to
Setup Windows, Network, VPN &amp; Remote Access on <A
href="http://www.HowToNetworking.com">http://www.HowToNetworking.com</A> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Francesco" &lt;<A
href="mailto:[email protected]">[email protected]</A>&gt; wrotein
message <A
href="all,<BR>I have the following problem: We have a VPN client which connects
to<BR>another LAN with IPSec.<BR>Meanwhile it's connected I need to give
access to shared directories to<BR>other Pc in the LAN.<BR><BR>So I decided to
buy another ethernet card and installed it on the XP<BR>Box.<BR><BR>What I
would like to do is :<BR><BR>[ LAN ]----Tcp/IP------&gt; [ XP Box sp 2 ]
------IPSec-----&gt; [VPN]<BR><BR>Unfortunately when I connect to the VPN my
LAN is not visible anymore.<BR>I have tried to bridge connections, fromthe
Network Control Panel but<BR>as soon as I do it the VPN client disconnects
because of security<BR>threat.<BR><BR>I understand that there are some
security constraints because of them<BR>the VPN could be exposed to a remote
LAN, but I just need that my XP<BR>Box can both --access vpn--, and --be
reachable from the LAN--.<BR><BR>Is it possible to do it?<BR>Thanks a
lot<BR>Francesco<BR></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_002B_01C70962.BC303770--
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top