VPN + Terminal Services doesn't work

[miguel.salles]

Hello to all


We have to connect with terminal services trough a VPN and it does not
work.

We have a local network with internet connection, and a workstation
with win XP and At&t client for VPN instaled. The VPN connection works
but the terminal services doesn't find the destination IP.
We also have a windows 2003 server with nat configured sharing the
internet connection and other resources.
When we connect the workstation direct in a modem, or adsl modem (out
of the local network), to have the internet connection both work fine
(VPN and Terminal services)
What kind of configuration should whe verify first ??

Thanks a lot

 

[Pegasus \(MVP\)]

Hello to all


We have to connect with terminal services trough a VPN and it does not
work.

We have a local network with internet connection, and a workstation
with win XP and At&t client for VPN instaled. The VPN connection works
but the terminal services doesn't find the destination IP.
We also have a windows 2003 server with nat configured sharing the
internet connection and other resources.
When we connect the workstation direct in a modem, or adsl modem (out
of the local network), to have the internet connection both work fine
(VPN and Terminal services)
What kind of configuration should whe verify first ??

Thanks a lot

Start with your basic tests while the VPN is active:
- ping WinXP-PC
- telnet WinXP-PC 3389

Do this both with NetBIOS names and with IP addresses.

 

[Ryan Hanisco]

Miguel,

When going across a VPN tunnel and the PPPoE connection that you can get
from some providers, the network MTU can be a factor. Make sure that
the MTU is set to 1300 on both ends of this tunnel or it is possible
that packets will be dropped.

You can test this by doing large pings across the tunnel.

The MTU is best set either in the VPN hardware or the VPN client
(Cisco's comes with an MTU tool.) In a worst case scenario, you can do
this on machines on both sides of the tunnel, but this is a pain.

For Windows XP http://support.microsoft.com/kb/283165/ (Ignore the
warning about values less than 1400 -- the VPN tunnel will take you down
further. Theoretically this should work at 1392 at the max though.)

For Server: http://support.microsoft.com/kb/900926/

Ryan Hanisco
FlagShip Integration Services