VPN Problem

[Chris Jones]

VPN Problem:

I can connect and authenticate but cannot browse or ping remote network. all
networks both client and server are all on the same 10.0.0.x networks is
there a way to VPN without changing IP address. We all use the same routers
supplied by ISP so all the same gateway of 10.0.0.X.

I have it narrowed down to the fact that all of the networks are all on the
same ISP so connecting to the SBS2003 server from one of the other networks
causes some issues with IP Addressing. All of the networks are on the same
10.0.0.X Netmask with 255.255.255.0 being the subnet. I was wondering if
there is a workaround to get these other networks talking? I am thinking of
trying to change the ip address of the server but am really scared to do
this, I dont like to change these kinds of things after setup. Can someone
point me in the right direction? Also is this really worth the effort? And
is there a way using routing that I could have the VPN server on a
192.168.1.X network but still communicate to 10.0.0.X network?

 

[Dave]

VPN Problem:

I can connect and authenticate but cannot browse or ping remote network. all
networks both client and server are all on the same 10.0.0.x networks is
there a way to VPN without changing IP address. We all use the same routers
supplied by ISP so all the same gateway of 10.0.0.X.

I have it narrowed down to the fact that all of the networks are all on the
same ISP so connecting to the SBS2003 server from one of the other networks
causes some issues with IP Addressing. All of the networks are on the same
10.0.0.X Netmask with 255.255.255.0 being the subnet. I was wondering if
there is a workaround to get these other networks talking? I am thinking of
trying to change the ip address of the server but am really scared to do
this, I dont like to change these kinds of things after setup. Can someone
point me in the right direction? Also is this really worth the effort? And
is there a way using routing that I could have the VPN server on a
192.168.1.X network but still communicate to 10.0.0.X network?

I have been going through some of the same issues. Are all of your networks
private with just the firewall/gateway on the public 10.0.0.X networks? Or
are some publicly addressed?

Yes, you can have a VPN server on the private network, you just need to port
forward appropriate tunnelling ports (1723 for PPTP) on your router/firewall
to the VPN server. Also if your firewall restricts protocols you need to
enable GRE (TCP protocol 47) passthru.

In order for browsing to work, you need some method of name dissemination,
i.e. in a workgroup environment the vpn client and server machines can run
NetBEUI in addition to TCP/IP... this will do the trick but can clutter up
your LAN with NetBEUI traffic. OR, you can install a WINS server and have
your clients point to it (DHCP served WINS is even better, try static first
to see if you can get it working). I only have a few remote clients, so I
use the NetBEUI solution, it's simple to set up (install, really... there is
no setup). Make sure your clients are in the same workgroup as the LAN
machines.

In a domain environment WINS is the way to go. You can also use DNS but
then all your machines must be in the dns database with FQDNs.

dave