VPN server problem


G

Guest

Instelled win2000 Server SP 4 on the machine
2 Nics
1 Private 69.211.173.XX
1 Public 192.168.2.1
When I configured VPN server I lost internet connection on the server and no
longer able to ping router on public side.
When disableing the VPN server in routing Ras connections it works fine.
Im not able to authenticate to vpn from outside totaly. It does not see the
server.
I can login in to the VPN from inside (public side) only.
Any Ideas?

Thanks
 
Ad

Advertisements

B

Bill Grant

Did you use the "VPN Server" option in the RRAS wizard? This sets packet
filters to block all non-VPN traffic. Check your public interface for packet
filters.

What name are you using when trying to connect externally? It must
resolve to the server's public IP.
 
G

Guest

Yes VPN Option in RRAS server,
How do I check the ineterface for packet filters?
I use public IP address to login.
 
B

Bill Grant

In the RRAS console, go to the IP routing section. Right-click on your
public interface and select properties. On the General page, click the Input
Filters box.
 
G

Guest

Sorry for delay I was away.
Which packets should stay on the RRAS Input / Output filters?
 
B

Bill Grant

That is entirely up to you. What do you want to allow and what do you want
to block? By default, no filters are active. Using the VPN option in the
wizard blocks everything except what VPN needs.
 
Ad

Advertisements

G

Guest

Thanks
All good!

One more question:
If the VPN user logs in to the server, how they can browse internet at the
same time? (XP client)
 
Ad

Advertisements

B

Bill Grant

By default, all traffic will go to the RRAS server. To keep the default
route to the Internet, you clear the "use default gateway.." setting on the
client (in Advanced TCP/IP settings of the connection properties). For more
details, see KB 254231.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top