Win 2k Server remote file share over the web

G

Guest

I have a windows 2K server permanently connected to the web.

I have a shared folder that I can access on my internal LAN.

I would like to provide other users outside my LAN access to a file share
via the web.

My network router has a fixed IP address.

What do I need to do to be able to provide others remote access to the file
share only? do I need to open port 80 on the router? add port 80 to my IP
address? Does my server also need a fixed IP address?

Please help.
 
P

Pegasus \(MVP\)

sebastian stephenson said:
I have a windows 2K server permanently connected to the web.

I have a shared folder that I can access on my internal LAN.

I would like to provide other users outside my LAN access to a file share
via the web.

My network router has a fixed IP address.

What do I need to do to be able to provide others remote access to the file
share only? do I need to open port 80 on the router? add port 80 to my IP
address? Does my server also need a fixed IP address?

Please help.

You need to set up a VPN (Virtual Private Network).
 
G

Guest

Thank you.

I have the VPN software by CISCO systems for win2K server, but it would not
load on win XP Pro for my desktops.

Is their a more up to date version or a more simple program to use with
very little setup?

Do I also need a fixed IP address for the router and the server?
 
P

Pegasus \(MVP\)

VPN is already built into Win2000/XP. You don't need the CISCO
stuff. To find out how to configure a VPN, have a look at these
articles:
http://search.microsoft.com/results.aspx?mkt=en-US&setlang=en-US&s6=on&q=vpn

To reach your internal machine, you either need to have a fixed
external IP address or you need to link your dynamic address to a
domain name. www.dyndns.org offer to do this for you free of
charge. You must also set up a tunnel through your rounter/firewall
for the VPN packets.
 
G

Guest

Thank you so much. the articles seem very helpful.

I have a fixed IP connection to my ISP will that do?

I will give this a try this evening and let you know if I have success.

Many thanks again for your help.
 
G

Guest

I attempted to setup the connection last night. I did give it a few hours.

I followed instructions in the win2k server Bible to setup a RAS connection.

However, I receive an error:
"TCP/IP CP reported error 733: Your computer and the remote computer could
not agree on PPP control protocols."
I read up on the error on the KBase, and implemented the solution. However,
I still receive the same error message.

When I check the event viewer on the server, the error for the RAS server
details: "The client failed to negotiate a security policy, and was
disconnected". I have created a new security policy, but I still get the
same error on the client and the same error on the server.

It seems that the client is clearly reaching the server , but the server
keeps denying access to the client because the the client does not meet the
security policy profile.

*I have made sure that the user name on the server is in the Group that is
allowed access to the server, and the user account is granted remote access.

*The VPN ports are all open and accepting the connections.

*I have upgraded the networking compnents for the incomming connections.
However, this connection is "greyed out". Does it become active when a
connection is made similar to a LAN internection?

1) Any ideas what Im doing wrong?
2) Also, its not quite clear where I enter details of the fixed IP address
conection I have to my ISP. Is this the default gateway? or the IP address
of the server?

Any help would be greatly appreciated.
 
P

Pegasus \(MVP\)

See below.


sebastian stephenson said:
I attempted to setup the connection last night. I did give it a few hours.

I followed instructions in the win2k server Bible to setup a RAS connection.

However, I receive an error:
"TCP/IP CP reported error 733: Your computer and the remote computer could
not agree on PPP control protocols."

This message suggests that the machines use dissimilar protocols:
- PPTP[Point-to-Point Tunneling Protocol]
- L2TP[Layer 2 Tunneling Protocol]

Your best bet is to leave the setting at "automatic" so the Windows
can figure out which protocol to use.
I read up on the error on the KBase, and implemented the solution. However,
I still receive the same error message.

When I check the event viewer on the server, the error for the RAS server
details: "The client failed to negotiate a security policy, and was
disconnected". I have created a new security policy, but I still get the
same error on the client and the same error on the server.

It seems that the client is clearly reaching the server , but the server
keeps denying access to the client because the the client does not meet the
security policy profile.

*I have made sure that the user name on the server is in the Group that is
allowed access to the server, and the user account is granted remote access.

*The VPN ports are all open and accepting the connections.

Are you saying that you have created a tunnel through your
firewall? If so, which option did you use:
a) Port 1723
b) Port 1723 and the GRE protocol
c) Inbuilt VPN option

Many routers won't authenticate you if you select option a).
The other options will always work.
*I have upgraded the networking compnents for the incomming connections.
However, this connection is "greyed out". Does it become active when a
connection is made similar to a LAN internection?

I don't understand "upgrade". On the host you "install" the VPN
by allowing incoming connections.
1) Any ideas what Im doing wrong?
2) Also, its not quite clear where I enter details of the fixed IP address
conection I have to my ISP. Is this the default gateway? or the IP address
of the server?

Your fixed external IP address goes into the details of the
"dial-up" shortcut you created on the VPN client.
 
G

Guest

Thanks,

I'll give it another go tonight.

Re the fixed IP.

Are you saying that I dont need to enter details fo the external fixed IP in
the default gateway details on the RAS server connection?

Should I just leave those settings to DHCP?
--
Learning SQL and Access


Pegasus (MVP) said:
See below.


sebastian stephenson said:
I attempted to setup the connection last night. I did give it a few hours.

I followed instructions in the win2k server Bible to setup a RAS connection.

However, I receive an error:
"TCP/IP CP reported error 733: Your computer and the remote computer could
not agree on PPP control protocols."

This message suggests that the machines use dissimilar protocols:
- PPTP[Point-to-Point Tunneling Protocol]
- L2TP[Layer 2 Tunneling Protocol]

Your best bet is to leave the setting at "automatic" so the Windows
can figure out which protocol to use.
I read up on the error on the KBase, and implemented the solution. However,
I still receive the same error message.

When I check the event viewer on the server, the error for the RAS server
details: "The client failed to negotiate a security policy, and was
disconnected". I have created a new security policy, but I still get the
same error on the client and the same error on the server.

It seems that the client is clearly reaching the server , but the server
keeps denying access to the client because the the client does not meet the
security policy profile.

*I have made sure that the user name on the server is in the Group that is
allowed access to the server, and the user account is granted remote access.

*The VPN ports are all open and accepting the connections.

Are you saying that you have created a tunnel through your
firewall? If so, which option did you use:
a) Port 1723
b) Port 1723 and the GRE protocol
c) Inbuilt VPN option

Many routers won't authenticate you if you select option a).
The other options will always work.
*I have upgraded the networking compnents for the incomming connections.
However, this connection is "greyed out". Does it become active when a
connection is made similar to a LAN internection?

I don't understand "upgrade". On the host you "install" the VPN
by allowing incoming connections.
1) Any ideas what Im doing wrong?
2) Also, its not quite clear where I enter details of the fixed IP address
conection I have to my ISP. Is this the default gateway? or the IP address
of the server?

Your fixed external IP address goes into the details of the
"dial-up" shortcut you created on the VPN client.
Any help would be greatly appreciated.
--
Learning SQL and Access
 
G

Guest

I gained a connection to the remote connection through my LAN connection.

I will try to connect from another network tomorrow and let you know how
that goes.

I did not need to enter the IP address that was provided as an external IP
in the remote connection details, I simply entered the server name. Is this
because Im on my LAN???

Also, when I connect to the remote connection how do I connect to the shared
drives on the connection?

Thanks again for your help. I really appreciate getting this far.
--
Learning SQL and Access


Pegasus (MVP) said:
See below.


sebastian stephenson said:
I attempted to setup the connection last night. I did give it a few hours.

I followed instructions in the win2k server Bible to setup a RAS connection.

However, I receive an error:
"TCP/IP CP reported error 733: Your computer and the remote computer could
not agree on PPP control protocols."

This message suggests that the machines use dissimilar protocols:
- PPTP[Point-to-Point Tunneling Protocol]
- L2TP[Layer 2 Tunneling Protocol]

Your best bet is to leave the setting at "automatic" so the Windows
can figure out which protocol to use.
I read up on the error on the KBase, and implemented the solution. However,
I still receive the same error message.

When I check the event viewer on the server, the error for the RAS server
details: "The client failed to negotiate a security policy, and was
disconnected". I have created a new security policy, but I still get the
same error on the client and the same error on the server.

It seems that the client is clearly reaching the server , but the server
keeps denying access to the client because the the client does not meet the
security policy profile.

*I have made sure that the user name on the server is in the Group that is
allowed access to the server, and the user account is granted remote access.

*The VPN ports are all open and accepting the connections.

Are you saying that you have created a tunnel through your
firewall? If so, which option did you use:
a) Port 1723
b) Port 1723 and the GRE protocol
c) Inbuilt VPN option

Many routers won't authenticate you if you select option a).
The other options will always work.
*I have upgraded the networking compnents for the incomming connections.
However, this connection is "greyed out". Does it become active when a
connection is made similar to a LAN internection?

I don't understand "upgrade". On the host you "install" the VPN
by allowing incoming connections.
1) Any ideas what Im doing wrong?
2) Also, its not quite clear where I enter details of the fixed IP address
conection I have to my ISP. Is this the default gateway? or the IP address
of the server?

Your fixed external IP address goes into the details of the
"dial-up" shortcut you created on the VPN client.
Any help would be greatly appreciated.
--
Learning SQL and Access
 
P

Pegasus \(MVP\)

When you're on your internal network then your PC
can resolve the name of the VPN host to an IP address.
This will not be the case when you attempt to make a
connection via the Internet - hence you must specify the
full IP address.

To connect to a share, use the usual syntax:

net use Q: \\HostName\ShareName


sebastian stephenson said:
I gained a connection to the remote connection through my LAN connection.

I will try to connect from another network tomorrow and let you know how
that goes.

I did not need to enter the IP address that was provided as an external IP
in the remote connection details, I simply entered the server name. Is this
because Im on my LAN???

Also, when I connect to the remote connection how do I connect to the shared
drives on the connection?

Thanks again for your help. I really appreciate getting this far.
--
Learning SQL and Access


Pegasus (MVP) said:
See below.


in message news:[email protected]...
I attempted to setup the connection last night. I did give it a few hours.

I followed instructions in the win2k server Bible to setup a RAS connection.

However, I receive an error:
"TCP/IP CP reported error 733: Your computer and the remote computer could
not agree on PPP control protocols."

This message suggests that the machines use dissimilar protocols:
- PPTP[Point-to-Point Tunneling Protocol]
- L2TP[Layer 2 Tunneling Protocol]

Your best bet is to leave the setting at "automatic" so the Windows
can figure out which protocol to use.
I read up on the error on the KBase, and implemented the solution. However,
I still receive the same error message.

When I check the event viewer on the server, the error for the RAS server
details: "The client failed to negotiate a security policy, and was
disconnected". I have created a new security policy, but I still get the
same error on the client and the same error on the server.

It seems that the client is clearly reaching the server , but the server
keeps denying access to the client because the the client does not
meet
the
security policy profile.

*I have made sure that the user name on the server is in the Group that is
allowed access to the server, and the user account is granted remote access.

*The VPN ports are all open and accepting the connections.

Are you saying that you have created a tunnel through your
firewall? If so, which option did you use:
a) Port 1723
b) Port 1723 and the GRE protocol
c) Inbuilt VPN option

Many routers won't authenticate you if you select option a).
The other options will always work.
*I have upgraded the networking compnents for the incomming connections.
However, this connection is "greyed out". Does it become active when a
connection is made similar to a LAN internection?

I don't understand "upgrade". On the host you "install" the VPN
by allowing incoming connections.
1) Any ideas what Im doing wrong?
2) Also, its not quite clear where I enter details of the fixed IP address
conection I have to my ISP. Is this the default gateway? or the IP address
of the server?

Your fixed external IP address goes into the details of the
"dial-up" shortcut you created on the VPN client.
Any help would be greatly appreciated.
--
Learning SQL and Access


:

Thank you so much. the articles seem very helpful.

I have a fixed IP connection to my ISP will that do?

I will give this a try this evening and let you know if I have success.

Many thanks again for your help.
--
Learning SQL and Access


:

VPN is already built into Win2000/XP. You don't need the CISCO
stuff. To find out how to configure a VPN, have a look at these
articles:
http://search.microsoft.com/results.aspx?mkt=en-US&setlang=en-US&s6=on&q=vpn
To reach your internal machine, you either need to have a fixed
external IP address or you need to link your dynamic address to a
domain name. www.dyndns.org offer to do this for you free of
charge. You must also set up a tunnel through your rounter/firewall
for the VPN packets.


"sebastian stephenson"
it
would use
with
a
file access
to the port
80 to
 
G

Guest

I have now lost the connection to the RAS server from my local LAN.

When I attempt to make a connection I receive the following error.
Event Type: Error
Event Source: RemoteAccess
Event Category: None
Event ID: 20050
Date: 15/02/2006
Time: 21:16:37
User: N/A
Computer: CHARMAH-SERVER1
Description:
The user CHARMAH-SERVER1\Dawg connected to port VPN3-127 has been
disconnected because no network protocols were successfully negotiatated.

I looked up error 20050 on the KB, but the article (link below) does not
help much.

http://support.microsoft.com/kb/310111/en-us

It seems my Win XP service Pack2 machine cannot negotiate the netwrok
protocol with the Win 2K server. The client PC obviously finds the server
and makes a connection, becaus the Event Viewer on the server picks it up.
But the connection is disconnected.

I've configured the remote access server over and over, and each time I get
the same message, not matter what settings I slightly change.

Their must be one underlying setting that needs to be changed.

Any ideas?
--
Learning SQL and Access


Pegasus (MVP) said:
When you're on your internal network then your PC
can resolve the name of the VPN host to an IP address.
This will not be the case when you attempt to make a
connection via the Internet - hence you must specify the
full IP address.

To connect to a share, use the usual syntax:

net use Q: \\HostName\ShareName


sebastian stephenson said:
I gained a connection to the remote connection through my LAN connection.

I will try to connect from another network tomorrow and let you know how
that goes.

I did not need to enter the IP address that was provided as an external IP
in the remote connection details, I simply entered the server name. Is this
because Im on my LAN???

Also, when I connect to the remote connection how do I connect to the shared
drives on the connection?

Thanks again for your help. I really appreciate getting this far.
--
Learning SQL and Access


Pegasus (MVP) said:
See below.


in message I attempted to setup the connection last night. I did give it a few
hours.

I followed instructions in the win2k server Bible to setup a RAS
connection.

However, I receive an error:
"TCP/IP CP reported error 733: Your computer and the remote computer could
not agree on PPP control protocols."

This message suggests that the machines use dissimilar protocols:
- PPTP[Point-to-Point Tunneling Protocol]
- L2TP[Layer 2 Tunneling Protocol]

Your best bet is to leave the setting at "automatic" so the Windows
can figure out which protocol to use.

I read up on the error on the KBase, and implemented the solution.
However,
I still receive the same error message.

When I check the event viewer on the server, the error for the RAS server
details: "The client failed to negotiate a security policy, and was
disconnected". I have created a new security policy, but I still get the
same error on the client and the same error on the server.

It seems that the client is clearly reaching the server , but the server
keeps denying access to the client because the the client does not meet
the
security policy profile.

*I have made sure that the user name on the server is in the Group that is
allowed access to the server, and the user account is granted remote
access.

*The VPN ports are all open and accepting the connections.

Are you saying that you have created a tunnel through your
firewall? If so, which option did you use:
a) Port 1723
b) Port 1723 and the GRE protocol
c) Inbuilt VPN option

Many routers won't authenticate you if you select option a).
The other options will always work.

*I have upgraded the networking compnents for the incomming connections.
However, this connection is "greyed out". Does it become active when a
connection is made similar to a LAN internection?

I don't understand "upgrade". On the host you "install" the VPN
by allowing incoming connections.

1) Any ideas what Im doing wrong?
2) Also, its not quite clear where I enter details of the fixed IP address
conection I have to my ISP. Is this the default gateway? or the IP
address
of the server?

Your fixed external IP address goes into the details of the
"dial-up" shortcut you created on the VPN client.

Any help would be greatly appreciated.
--
Learning SQL and Access


:

Thank you so much. the articles seem very helpful.

I have a fixed IP connection to my ISP will that do?

I will give this a try this evening and let you know if I have success.

Many thanks again for your help.
--
Learning SQL and Access


:

VPN is already built into Win2000/XP. You don't need the CISCO
stuff. To find out how to configure a VPN, have a look at these
articles:

http://search.microsoft.com/results.aspx?mkt=en-US&setlang=en-US&s6=on&q=vpn

To reach your internal machine, you either need to have a fixed
external IP address or you need to link your dynamic address to a
domain name. www.dyndns.org offer to do this for you free of
charge. You must also set up a tunnel through your rounter/firewall
for the VPN packets.


"sebastian stephenson"
wrote
in message Thank you.

I have the VPN software by CISCO systems for win2K server, but it
would
not
load on win XP Pro for my desktops.

Is their a more up to date version or a more simple program to use
with
very little setup?

Do I also need a fixed IP address for the router and the server?
--
Learning SQL and Access


:


"sebastian stephenson"
<[email protected]>
wrote
in message
I have a windows 2K server permanently connected to the web.

I have a shared folder that I can access on my internal LAN.

I would like to provide other users outside my LAN access to a
file
share
via the web.

My network router has a fixed IP address.

What do I need to do to be able to provide others remote access
to the
file
share only? do I need to open port 80 on the router? add port
80 to
my IP
address? Does my server also need a fixed IP address?

Please help.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top