[vpn] newbie setting up vpn

[Scott Penno]

Hi Nate,

>From what you're describing, you're attempting to setup a
VPN from the WinXP client on a private network in office B
to a Win2K host on a private network in office A.  As these
are Windows boxes, I'm guessing that you're using IPSec.  Is
this correct?
The problem here probably lies with the fact that you're
attempting to use IPSec across a network connection that
involves NAT.  There are a number of incompatibilities
between IPSec and NAT which is why what you're attempting is
not working.  Have a look at
http://www.ietf.org/internet-drafts/draft-ietf-ipsec-nat-req
ts-01.txt for more details about this.
Your best bet would be to create the VPN from the routers at
your networks edge, or attempt to obtain public IP addresses
for the hosts you wish to create a VPN between.

Scott.



----- Original Message -----
From: "Nate Harel" <nharel at nettech-services.net>
To: <vpn at securityfocus.com>
Sent: Monday, June 17, 2002 9:45 AM
Subject: [vpn] newbie setting up vpn


> Hi all,
>
> Forgive my ignorance here but I am trying to set up a
small vpn connection
> between two offices.
>
> Office A:
> win2k machine on a small network behind a Netgear router.
I set up the
> router to forward vpn traffic on port 1723 to the Win2K
machine. That
> machine has been setup to accept incoming calls. I set up
the local network
> using 192.168.0.x addresses. I configured the incoming
connection to accept
> calls from networks with that address range. I also made
the Office A local
> disk shared.
>
> Office B:
> WinXP machine on a small network behind a Netgear router.
Again, I setup
> the router to forward vpn traffic on port 1723. That
machine was setup with
> an outgoing vpn connection to Office A with an IP address
of 192.168.0.100.
> This local network is also 192.168.0.x.
>
>  From Office B, I dial out to Office A and get a
connection. I can see the
> connection being made at A. So far all is well. HOWEVER,
from B, I cannot
> see any of Office A's network, files, computers, etc. It
is almost like
> there is no connection at all.
>
>
> HELP!! I am stumped.
>
>
> Nate
>
>
>                  ----------------------------------
>                              Nate Harel
>                          NetTech Services
>                            56 Pickering Street
>                    Needham, MA  02492
>                        Tel:  1-781-559-8176
>                    Toll Free: 1-877-567-8936
>                       FAX:  1-877-567-8936
>                  Email:  nharel at nettech-services.com
>                       www.nettech-services.net
>                       www.nettech-backup.com
>                       www.nettech-hosting.com
>                  ----------------------------------
>
>
> VPN is sponsored by SecurityFocus.com
>
>
>



VPN is sponsored by SecurityFocus.com