is it possible to access internet with VPN connected

[Guest]

Hi all,
is it possible to access internet and VPN on the same machine???
if yes then do tell me how..
it would be amazing for me to have both on the same
thanks in advance

 

[Chelsea]

Yes its possible-it has to be really as a VPN simply uses PPTP (point to
point tunneling protocol) to create a pipe between two internet connected
computers. It's also relatively easy to do, involving setting up clients on
the two machines that will communicate. XP has a wizard that will do that in
Network Connections. The part we found difficult was not establishing the
connections between sites, but actually being able to browse the remote
networks. This is because you need to have certain ports forwarded by your
firewall software or router. That involves writing firewall rules which can
be a little confusing. However once the necessary ports are open and can
communicate with the network Netbios names become available and machine
specific shares. It gets more complex when security is implemented, but
thats the gist of it.

Chelsea

 

[Guest]

hi chelsea,

thanks for the support, but still m not able to make it out that how it can
be done. could you please b specific about it like taking some examples-that
would be an extra help..
thanks and regards

 

[Chelsea]

Hi
well first thing is to define two computers at remote locations that you
want to talk together. Obviously you could get one computer to dial up the
other and talk that way-but that requires a costly long distance call. So
instead you use the internet. If both computers have net access then you can
link them securely together with a protocol called PPTP and when you do that
its called a virtual private network or VPN. The PPTP requires the TCP/IP
protocol stacks to work. That's the theory.

I havn't tried this with XP Home so it might not be there, but with XP
Professional you have to set up a remote machine to act as a VPN server over
the internet. Go to Control Panel/Network Connections. In the left side pane
under network tasks you should see "Create a new Connection". Click on it
and a wizard fires up. You get to a form asking what you want to do. Click
the setup an advanced connection radio button, and then the Accept incomming
Connections radio button. You'll get a box with connection devices ie
parallel printer port-don't check the box just press next. You should now
see a form that talks about Virtual Private Networks. Click the button allow
Virtual Private Connections. You then specify the users you want to have
permission to connect to the computer-press next-You are then asked what
network components are to be installed. Make sure all the boxes are checked
as you will be using TCP/IP. At this pont some people opt to use the Netbeui
protocol as well as its easy to setup. Your computer will now almost accept
incomming connections from any internet computer with an account on your
system.

In Network connections you should see a new class of connection has appeared
called Incomming. If you right click the Icon and select properties you will
find that the things setup in the wizard are there and can be changed. Go to
the Networking tab and double click TCP/IP. Now in the box that appears opt
to specify a range of IP addresses something like 192.168.0.70 to
192.168.0.80 The numbers should conform to the local addresses used on the
server computer.

Now setup a VPN client on the non-server machine. Control panel-Network
"connections create a new connection wizard" radio button. as before Now
select Connect to the network at my workplace radio button, then VPN
Connection, followed by a name for the client. Opt to not dial the
connection. Now the next stage is critical enter the IP address of the
computer with the VPN server on. If everything works you can double click
the client icon and you'll connect to the vpn server.Remember you must have
a user account on the machine hosting the vpn server. One last thing port
1723 must be forwarded by your firewall. If it is not the VPN will not work.
Hope that helps.

Chelsea

 

[frodo]

in the properties for the vpn connection, check the box that says "use
default gateway on remote network". this will only work if the remote
network has its own internet access.

 

[P.J. Whoopie]

In my experience the answer is, "It depends..." It depends on what VPN
software you are using. And it depends on how your VPN software is
configured.

For example, my employer uses a Cisco VPN. My employer has it configured
such that when I have the VPN connection active I cannot make a network
connection except through their internet connection (not through mine).
That means, for example,.that my NAS and other computers connected to the
LAN side of my router here at home are inaccessible to me when the VPN
connection is active -- but I can access most public internet sites.

My employer *could* configure the software to allow me to access local
resources when the connection is active but they have/will not as this would
open their network to attacks if one of my other machines has been
compromised. Because the VPN client inserts itself into the network stack
on my machine, it is able to wrap itself around all traffic and only allow
what it likes. So unless a packet is coming from the server side of the VPN
connection, it simply falls on the floor. And if I attempt to access
192.168.0.* (i.e., a local resource on my LAN), this gets wrapped up by the
VPN and resolves to nothing.

So if you want access to web sites and/or other resources on the internet
(but not on your local LAN) then it is generally possible to have both (all
your connections "typically" end up passing through the
firewalls/routers/security appliances on the other side of the connection).
If you want to have a VPN connection active and access resources on your
LAN, you will usually not succeed.

P.J.