VPN server with a firewall

[Guest]

I have a Windows 2003 VPN server that is working fine. My trouble is that I
just can't integrate the thing with my firewall. Has anyone succeeded in
doing this?

MS recommend putting it in front or behind the firewall. But I can't get
this to work because both network cards must sit on the same subnet, and so
just route around each other.

My firewall people say I should make it a single card VPN server and put it
in the DMZ, behnind a NAT. I have done this, and PPTP works fine - but IPsec
doesn't work in this configuration.

The more I do this, the more I think MS VPN server is incompatible with a
Firewall. Can anyone help?

 

[Robert L [MS-MVP]]

Assuming you have two NICs, they should not be the same subnet. Also, I would use NAT instead of firewall.
For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

I have a Windows 2003 VPN server that is working fine. My trouble is that I
just can't integrate the thing with my firewall. Has anyone succeeded in
doing this?

MS recommend putting it in front or behind the firewall. But I can't get
this to work because both network cards must sit on the same subnet, and so
just route around each other.

My firewall people say I should make it a single card VPN server and put it
in the DMZ, behnind a NAT. I have done this, and PPTP works fine - but IPsec
doesn't work in this configuration.

The more I do this, the more I think MS VPN server is incompatible with a
Firewall. Can anyone help?