WHy need 2 NIC to install VPN on W2K3??

[Sara]

I have a windows 2003 server standard, and when I tried to install VPN
server on RRAS.
It said. I need to have 2 network card to do that, why ?? Anyway can giv eme
advice. Never happened on my windows 2000 server like this b4.
I only have 1 NIC at my machine.

Thank you.

 

[Robert L [MS-MVP]]

this may help. quoted from http://www.ChicagoTech.net
How to setup VPN on w2k server with one NIC

Symptoms: When attempting to create VPN on w2k server with one NIC, you may
receive "You have chosen the last available connection as the Internet
connection. A VPN server required that one connection be used as the private
network connection" if you select the NIC.

1. You should highlight No internet connection instead of the NIC or LAN
connection.
2. You may try "Manually configured server option".


--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

 

[Sharoon Shetty K [MSFT]]

With a single NIC you can configure you machine as a remote server but not
for routing.

Why do we need 2 NIC for setting up RRAS?
A VPN works by making a "virtual" link between two machines or sites which
are using private IP addresses. It achieves this by sending the private
packets across the public Internet as the payload of normal public addressed
packets. In other words, the private packets are inside a public IP wrapper.

The VPN server has two interfaces, one in the private LAN and one in the
public Internet. Traffic which is destined for another private addressed
site or a remote VPN client arrives at the server's private interface. The
server encrypts the packet, encapsulates it in a wrapper which has the
remote site/client public IP on the outside and sends it off through its
public interface. An of course does the reverse with encapsulated traffic it
receives.

A VPN server can operate with only one interface if it is on a private LAN
which connects to the Internet through a router/firewall. The firewall can
take the place of the server's public interface. The remote client connects
to the firewall's public IP, and the VPN traffic can be forwarded through
the LAN to the VPN server. Traffic going from the VPN server is encrypted
and encapsulated as above, and then is sent to the firewall for delivery
through the Internet.

 

[Sara]

Sharoon,

But why I can setup a VPN server with one NIC on Windows 2000 server?
I do have router like the last paragraphy mentioned, so my question is how
can I setup a VPN server with only one NIC on windows 2003 server now? Thank
you.

Sara

 

[Bill Grant]

Configure RRAS as a remote access server. Test the config by making a VPN
connection to the server from a LAN client.

When this all works, forward tcp port 1723 from your router to the RRAS
server's LAN IP. Then try to connect from a remote machine to the router's
public IP address. Because of the port forwarding, the PPTP connection will
be established between the remote client and the RRAS server.

 

[Priya Raghavan [MSFT]]

With one NIC, you can setup a VPN Server by choosing the "Custom
Configuration" option in the VPN Server.

 

[jproter]

Sara,

Were you able to set this VPN server?

I have a similar configuration with the same question.

I had established a VPN connection before with the current serve
(being replaced by a 2003) but not with the 2003 (still in lab).

Regards,
Jona


-
jprote