VPN server problem

[Guest]

Instelled win2000 Server SP 4 on the machine
2 Nics
1 Private 69.211.173.XX
1 Public 192.168.2.1
When I configured VPN server I lost internet connection on the server and no
longer able to ping router on public side.
When disableing the VPN server in routing Ras connections it works fine.
Im not able to authenticate to vpn from outside totaly. It does not see the
server.
I can login in to the VPN from inside (public side) only.
Any Ideas?

Thanks

 

[Bill Grant]

Did you use the "VPN Server" option in the RRAS wizard? This sets packet
filters to block all non-VPN traffic. Check your public interface for packet
filters.

What name are you using when trying to connect externally? It must
resolve to the server's public IP.

 

[Guest]

Yes VPN Option in RRAS server,
How do I check the ineterface for packet filters?
I use public IP address to login.

 

[Bill Grant]

In the RRAS console, go to the IP routing section. Right-click on your
public interface and select properties. On the General page, click the Input
Filters box.

 

[Guest]

Sorry for delay I was away.
Which packets should stay on the RRAS Input / Output filters?

 

[Bill Grant]

That is entirely up to you. What do you want to allow and what do you want
to block? By default, no filters are active. Using the VPN option in the
wizard blocks everything except what VPN needs.

 

[Guest]

Thanks
All good!

One more question:
If the VPN user logs in to the server, how they can browse internet at the
same time? (XP client)

 

[Bill Grant]

By default, all traffic will go to the RRAS server. To keep the default
route to the Internet, you clear the "use default gateway.." setting on the
client (in Advanced TCP/IP settings of the connection properties). For more
details, see KB 254231.