Unable to access hosts by name across a PPTP VPN connection

G

Guest

Hello,

I've setup a PPTP VPN on a Windows XP Home Edition machine on my home
network. I'm able to successfully login to the VPN server from machines on
my remote network but I'm unable to access machines on my home network by
name (e.g. \\computer1). IP addresses work fine (e.g. \\192.168.0.4). How
can I do this? I'm open to using a WINS server but I don't think one is
provided with Windows XP Home Edition. Also, I've considered using the
LMHOSTS file to configure a static mapping between host names and IP
addresses but I use DHCP on my home network so LMHOSTS does not work for me.

I've read that NetBIOS broadcasts to 255.255.255.255 are used to allow name
resolution on my home network. However, from a VPN client, broadcasts to
255.255.255.255 are not forwarded to my home network. I think the solution
is to configure my VPN clients and server to forward NetBIOS broadcast
traffic to my home network. But there is no information on this AFAIK. How
can I do this? Thanks.
 
S

Sooner Al [MVP]

shaunp said:
Hello,

I've setup a PPTP VPN on a Windows XP Home Edition machine on my home
network. I'm able to successfully login to the VPN server from machines
on
my remote network but I'm unable to access machines on my home network by
name (e.g. \\computer1). IP addresses work fine (e.g. \\192.168.0.4).
How
can I do this? I'm open to using a WINS server but I don't think one is
provided with Windows XP Home Edition. Also, I've considered using the
LMHOSTS file to configure a static mapping between host names and IP
addresses but I use DHCP on my home network so LMHOSTS does not work for
me.

I've read that NetBIOS broadcasts to 255.255.255.255 are used to allow
name
resolution on my home network. However, from a VPN client, broadcasts to
255.255.255.255 are not forwarded to my home network. I think the
solution
is to configure my VPN clients and server to forward NetBIOS broadcast
traffic to my home network. But there is no information on this AFAIK.
How
can I do this? Thanks.

Well, the answer is to use static IP addresses on your home PCs that you
want to connect to *AND* use a lmhosts file. That is what I do. Here is an
example lmhosts file...

http://theillustratednetwork.mvps.org/Vista/PPTP/Examplelmhosts.txt

....that is based on the example network...

http://theillustratednetwork.mvps.org/Vista/PPTP/ExampleVistaVPNNetwork.pdf

MS lmhosts documentation...

http://support.microsoft.com/kb/314884/en-us

Help setting up static LAN IP addresses...

http://www.portforward.com/networking/staticip.htm

Beyond that have you seen this...

http://blogs.technet.com/rrasblog/a...s-over-a-vpn-connection-in-windows-vista.aspx

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375
 
E

elvis_costello79

Thanks very much for the response. I'd have responded sooner if the
Microsoft Web-based Newsreader hadn't decided to drop this post...
FYI - I've contacted Microsoft about the dropped post and have
switched to Google Groups in the interim to avoid associated problems,
thus the change in my contact information above. Anyhow...

This is really great information for using static IPs and a fixed name-
to-IP mapping to resolve NetBIOS names from VPN clients. The LMHOSTS
solution notwithstanding, I'd really like to discuss whether a NetBIOS-
based solution is possible since there are certain complications and
difficulties with using static IPs and fixed name/IP mappings which
NetBIOS would really seem to help with.

The first is that it's a rather manual and tedious process to provide
and install an LMHOSTS file to all VPN clients. My non-technical
users would almost certainly have problems if any manual steps are
required to use names after connecting to my VPN. To ease these
problems, I've considered preconfiguring an LMHOSTS file on all VPN
client workstations, but my non-technical VPN users and I plan to use
my VPN to spontaneously create VPN client connections for file
transfers and the machines used are not always going to owned by us or
known ahead of time (e.g. spontaneously using a friend's laptop at a
coffee shop w/free WiFi available to transfer files) so
preconfiguration is not a practical option. I'd like a simpler,
automatic, and user-friendly solution to enable and list computer
names (akin to directly accessing my home network) such as "Go to My
Network Places after connecting to the VPN" rather than "After
connecting to the VPN go to \\192.168.0.17\SharedDocs, download
LMHOSTS, backup your original LMHOSTS (if present) and replace with
new one, now you can use names like \\computer1 instead of \
\192.168.0.17, and don't forget to restore the original LMHOSTS after
disconnecting from VPN, especially if you're using a friend's laptop,
etc.). Using a LMHOSTS solution also requires me to manually update
the LMHOSTS file each time a new host is added/removed from my
network, which, while infrequent, is another step I'd really like to
avoid since I'm very likely to forget to update LMHOSTS if my
roommates or I get a new computer months from now (or if me or one of
my roommates moves out). Not to mention the standard difficulties and
problems of updating any stale LMHOSTS files which may or may not be
present on VPN client machines...

The second problem with LMHOSTS is that it I'd like to be able to view
my VPN clients' shared folders from my home network and list them by
name in My Network Places, as if they were connected to my local
network. I can see a little light at the end of the tunnel if I chose
to use LMHOSTS entries for VPN clients, but there are innumerable
disadvantages and I think I have to rule it out. We'll effectively
have too many problems with a static LMHOSTS file due to our use of
spontaneously created VPN client connections on arbitrarily-chosen,
"random", workstations.

I've read your links below and found that Microsoft implies that some
routers are capable of forwarding NetBIOS broadcasts across a VPN.
For this reason, I have confidence that it is possible to avoid using
LMHOSTS altogether and sidestep the associated difficulties with
NetBIOS over TCP since Windows is essentially acting as a router
between my VPN server adapter and home network adapter. See
http://support.microsoft.com/kb/314884/en-us and the use of the word
'generally' in the Comprehensive Information section (other Microsoft
articles also have this, but I'd have to dig for the links). Also,
I've found that various routers (e.g. Netgear FVS318) allow NetBIOS
forwarding over a VPN connection so <wishfulthinking>it should also be
possible on Windows XP Home Edition too</wishfulthinking>. I'd really
like to find a way to configure my VPN clients to forward NetBIOS
traffic to my VPN server and have my VPN server forward this traffic
to my local network. And vice versa. Are there solutions to this?

To provide additional food for thought while hunting for a NetBIOS
solution... While I was searching for settings which may enable
NetBIOS across a VPN I noticed that "ipconfig.exe /all" showed an
entry called WINS Proxy Enabled and that WINS Proxy Enabled is Yes on
my VPN Server. Does this play a role in NetBIOS forwarding and
possible have a part in the solution (and if not, exactly what does
the WINS Proxy Enabled option do?). I'd imagine that if my VPN server
adapter is able to act as a WINS Proxy then it should be possible to
configure it to forward NetBIOS broadcast traffic between my home and
VPN networks.

Thanks very much for any light anyone can shed on this. I'm really
motivated to find a way to do this and hope that I do not have to
resort to using LMHOSTS due to how myself and others plan to use my
VPN. Thanks and best regards.
 
S

Sooner Al [MVP]

For a small home LAN editing the lmhosts file and distributing it to one or
two clients should not be a big burden given the file will only change if
you happen to add or delete a desktop on your LAN. How many remote clients
and desktops on your home LAN do you have? Keeping in mind that XP (Pro or
Home) will only accept one incoming VPN connection at a time using the
built-in PPTP VPN server function I think your blowing this all out of
proportion unless this is a learning experience of some kind.

If you have a great many remote VPN clients and more than four or five or so
desktops on your local LAN you may need to start looking at a server class
OS like Small Business Server (SBS) or Windows 2008 (now in beta) or Windows
2003.

It all depends on what your trying to accomplish, IMHO...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375
 
E

elvis_costello79

For a small home LAN editing the lmhosts file and distributing it to one or
two clients should not be a big burden given the file will only change if
you happen to add or delete a desktop on your LAN. How many remote clients
and desktops on your home LAN do you have? Keeping in mind that XP (Pro or
Home) will only accept one incoming VPN connection at a time using the
built-in PPTP VPN server function I think your blowing this all out of
proportion unless this is a learning experience of some kind.

If you have a great many remote VPN clients and more than four or five or so
desktops on your local LAN you may need to start looking at a server class
OS like Small Business Server (SBS) or Windows 2008 (now in beta) or Windows
2003.

It all depends on what your trying to accomplish, IMHO...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program -http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a questionhttp://support.microsoft.com/KB/555375

Hi Al,

Again, I really appreciate the response. This is a combination of me
wanting to learn more about configuring MS VPNs and also solving some
practical problems I have. Hope this doesn't come across as too
academic, but to me these are also real problems that NetBIOS would
solve that LMHOSTS won't, frankly. I'd really like to know how to
forward NetBIOS traffic across the MS VPN to satisfy my learning goals
and also make administering my VPN a bit more automatic and easier at
the same time. The long descriptions above are just me trying to be
very detailed about my reservations about LMHOSTS, not a complete
dismissal of the idea ;-). LMHOSTS is certainly is easier to setup in
many ways and in many cases, but, IMO for my network, requires more
work for me to administer as new machines are added to my local
network and as new machines are used as VPN clients. It's clear to me
this additional administration work will definitely generate problems
for me (since I can't be there all the time to make sure everything
runs smoothly) and also will be frustrating to the people I'm trying
to provide access to (e.g. "why doesn't Paul's laptop appear in My
Network Places?? - Paul's laptop just connected to your home network
and I'm logged into the VPN" or "why can't Jim's home laptop see
Sally's files in My Network Places? - Sally's using some random
university desktop as a VPN client and she's just logged in - whatdya
mean we'll have to wait 'til you're off work to do this??!?").

The best way to characterise my VPN usage is that I'll have a
relatively small number of VPN user accounts and (for now) a
corresponding small number of people using these accounts and a low
number of simultaneous connections (for now, so 1 max is OK - and it's
also a learning experience), but I'll have a relatively large number
of machines I'll need to support as VPN clients. One big current goal
is to have any remote machine configured to behave as a VPN client
just show up in My Network Places after it logs in. On the local
side, I have 5 machines and occasionally have some laptops come in and
out of the network. The overall goal is to make it very very
incredibly mind-numbingly simple to transfer files between any remote
machine to any local machine, regardless of whether it's a laptop,
PDA, desktop and (eventually, but definitely not until I have Windows
Home VPN client to Windows Home VPN server connections working)
regardless of OS as I have Mac OS X, Microsoft Windows Home Edition,
and Windows Mobile Second Edition machines so far. This latter reason
has me very motivated to make most changes on my VPN server only to
minimize the need to account for differences on the VPN client
systems. In other words, I don't have a simple network. We're a
combination of musicians, coffee junkies, tech geeks, math nerds,
etc. and we've all got our own situations where we gotta transfer
files and some people want to use My Network Places instead of toting
around lists of IP addresses :).

I'll keep looking around. Hope there's a solution out there. If I
get this working I'll post the step by step to help out anyone else.
Best regards.
 
S

Sooner Al [MVP]

Hi Al,

Again, I really appreciate the response. This is a combination of me
wanting to learn more about configuring MS VPNs and also solving some
practical problems I have. Hope this doesn't come across as too
academic, but to me these are also real problems that NetBIOS would
solve that LMHOSTS won't, frankly. I'd really like to know how to
forward NetBIOS traffic across the MS VPN to satisfy my learning goals
and also make administering my VPN a bit more automatic and easier at
the same time. The long descriptions above are just me trying to be
very detailed about my reservations about LMHOSTS, not a complete
dismissal of the idea ;-). LMHOSTS is certainly is easier to setup in
many ways and in many cases, but, IMO for my network, requires more
work for me to administer as new machines are added to my local
network and as new machines are used as VPN clients. It's clear to me
this additional administration work will definitely generate problems
for me (since I can't be there all the time to make sure everything
runs smoothly) and also will be frustrating to the people I'm trying
to provide access to (e.g. "why doesn't Paul's laptop appear in My
Network Places?? - Paul's laptop just connected to your home network
and I'm logged into the VPN" or "why can't Jim's home laptop see
Sally's files in My Network Places? - Sally's using some random
university desktop as a VPN client and she's just logged in - whatdya
mean we'll have to wait 'til you're off work to do this??!?").

The best way to characterise my VPN usage is that I'll have a
relatively small number of VPN user accounts and (for now) a
corresponding small number of people using these accounts and a low
number of simultaneous connections (for now, so 1 max is OK - and it's
also a learning experience), but I'll have a relatively large number
of machines I'll need to support as VPN clients. One big current goal
is to have any remote machine configured to behave as a VPN client
just show up in My Network Places after it logs in. On the local
side, I have 5 machines and occasionally have some laptops come in and
out of the network. The overall goal is to make it very very
incredibly mind-numbingly simple to transfer files between any remote
machine to any local machine, regardless of whether it's a laptop,
PDA, desktop and (eventually, but definitely not until I have Windows
Home VPN client to Windows Home VPN server connections working)
regardless of OS as I have Mac OS X, Microsoft Windows Home Edition,
and Windows Mobile Second Edition machines so far. This latter reason
has me very motivated to make most changes on my VPN server only to
minimize the need to account for differences on the VPN client
systems. In other words, I don't have a simple network. We're a
combination of musicians, coffee junkies, tech geeks, math nerds,
etc. and we've all got our own situations where we gotta transfer
files and some people want to use My Network Places instead of toting
around lists of IP addresses :).

I'll keep looking around. Hope there's a solution out there. If I
get this working I'll post the step by step to help out anyone else.
Best regards.

You might be interested in OpenVPN as an alternative.

http://openvpn.net/

If I remember correctly if you use a bridge mode of operation versus a
routed mode of operation NetBIOS traffic will go over the VPN tunnel. It may
be worth experimenting with.

http://openvpn.net/faq.html#bridge1

I have some example config files, etc on this page...

http://theillustratednetwork.mvps.org/OpenVPN/OpenVPN.html

Good luck...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a question
http://support.microsoft.com/KB/555375
 
E

elvis_costello79

You might be interested in OpenVPN as an alternative.

http://openvpn.net/

If I remember correctly if you use a bridge mode of operation versus a
routed mode of operation NetBIOS traffic will go over the VPN tunnel. It may
be worth experimenting with.

http://openvpn.net/faq.html#bridge1

I have some example config files, etc on this page...

http://theillustratednetwork.mvps.org/OpenVPN/OpenVPN.html

Good luck...

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program -http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...
How to ask a questionhttp://support.microsoft.com/KB/555375

This looks really promising. Any VPN software capable of bridging
it's VPN and network interfaces is likely to give me what I'm looking
for. Plus, it removes the one connection limit imposed by the Windows
XP PPTP Server and seems to be very well put together and also has
options galore. I'll definitely be reading more about it. Thanks for
the pointer. Cheers.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top