VPN problem cannot see comptuers on either end point.

[david]

K I need to understand the concept better to help shed
some light on my problem. I have two hardware vpn boxes
that sit on the internet connection in two seperate
locations. The boxes are sept up properly because I they
provide internet connectivity to the ineternet and the
vpn that I set up between the two says connected under
status. Also I have checked the incomming log files of
the vpn tunnel and see communication from my two address
at each end of the tunnel using port 500. so I placed a
trigger to point to port 500. But the problem is that
even though the tunnel is connected and I can ping each
side I cannot see computers on either side of the tunnel.
They are 2000 servers on each end that are not domain
controllers. I have been on tech support with the vpn
boxes and they tell me that they cannot assist me any
further on the phone because I have a networking problem
and once theri boxes say that the vpn is connected then
it is out of their hands. So if their is a networking
problem what needs to be done in order for comptuers on
both sides of the tunnel are able to see each other?

The boxes are linksys routers. Layout is:
Local computer connects to server. Vpn box is given a
local address that clients see as a gateway then the
built in DHCP and DNS that are located in side the vpn
box transmitt packets from the (LAN)to the external
address which is the WAN side of the VPN box. This wan
address of my vpn router is an end point of my VPN tunnel
this same configuration is on the other end point of the
VPN tunnel.

Any help please and thank you very much!

David,

 

[Steve Jones]

First the obvious. I'm assuming you have either a fixed WAN IP or a
forwarding service like NO-IP.com If you have only a dynamic IP, you're
basically spinning your wheels here.

If the above is covered, first make sure the LinkSys Router is forwarding
the port handling the VPN to your 2K Server (LinkSys router admin, Advanced,
Forwarding).

Next, the target computer on your LAN must have a fixed or reserved LAN
address (Is your router doing DHCP? Is your server? Are all LAN IPs fixed?).

Are you running two NICs? From "Network and Dial-up Connections" go to
"Properties" for the NIC connected to the router. Click the "Sharing" tab
(next to the "General" tab), click "Settings", click the "Services" tab,
"Add" an entry for your VPL and point it at the computer on your LAN you
want to tunnel to.

If you're running two NICs things can get a little hairy.