VPN Setup Q

  • Thread starter Thread starter Brian
  • Start date Start date
B

Brian

I need just a simple VPN connection between two sites.
Is there an easy to follow walk-through somewhere that tells how to setup
just a simple VPN like I need?

Here's what I have and need to do:

Main Office
------------
Windows Server 2003
Exchange Server 2003
Active Domain
Internet Connection: DSL through DSL Router. DSL currently setup to forward
ports for http, e-mail, etc to the Win2003Server.

Branch Office
--------------
Windows Server 2003
Workgroup (unable to use AD for a reason)
Internet Connection: DSL. No separate router. DSL into NIC1 on WinSrv03.
NIC2 to LAN.
WinSrv03 has RRAS setup for NAT to allow users access to the internet.

Here's what I need to accomplish:
----------------------------------
All I need is to have the 5 users at the Branch Office be able to access the
Exchange Server located on the Main Office network as if they were
physically connected.

I do not have much experience with VPNs and have had a hard time trying to
find an easy to follow guide to set something like this up. I don't have
the free time to sit down and spend several hours learning everything about
remote access. I need to get this setup *now*.

Can anyone point me in the right direction?

--Brian
 
I forgot to add (if it helps anyone), the Main Office DSL Router is a
Linksys. The Branch Office server is running Tiny Firewall.

--Brian
 
this may help. quoted form http://www.ChicagoTech.net

How to Setup A Site-to-Site VPN Connection

To setup a Site-to-Site VPN Connection , you may need to configure two
windows servers for the Answering and Calling Routers. Here are the steps:

1. Run RRAS, on Configuration page, select LAN routing.
2. Configure VPN on the Answering Router.
3. Configure the Demand-dial Interface on the Answering Router.
4. Configure VPN on the Calling Router.
5. Configure the Demand-dial Interface on the Calling Router.
6. Confirm the Remote Access Policy Configuration on the Answering and
Calling Routers.


--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
 
I've played around with most of this but I *think* that my problem is with
either the firewall software on the server at the Branch Office or with the
DSL Router at the Main Office.

When I try to connect from the Branch Office, I get the message that the
remote side isn't responding.

Any ideas?

--Brian
 
Hi Brian,

Thank you for posting!

May I know what kind of firewall server you are using. If you are using ISA
2004 as the firewall server, I believe the below article in Microsoft
knowledge base will be helpful.

837355 How to configure a VPN server by using Internet Security and
http://support.microsoft.com/?id=837355

In ISA 2004 ISA Server Management, you can greate a VPN access rule as
Firewall Policy. You can leave the "All outbound protocols" option selected
in the "This rule applies to" list, and then click "Next". Note You can
control the protocols that the VPN clients use by modifying the access rule
after you create it.

Have a nice day!

Thanks & Regards,

Feng Mao [MSFT], MCSE
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| From: "Brian" <[email protected]>
| References: <[email protected]>
<[email protected]>
| Subject: Re: VPN Setup Q
| Date: Thu, 5 Aug 2004 11:15:38 -0500
| Lines: 92
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.win2000.ras_routing
| NNTP-Posting-Host: www.taxrfnd.com 12.15.58.45
| Path:
cpmsftngxa06.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08
.phx.gbl!TK2MSFTNGP12.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.ras_routing:13799
| X-Tomcat-NG: microsoft.public.win2000.ras_routing
|
| I've played around with most of this but I *think* that my problem is with
| either the firewall software on the server at the Branch Office or with
the
| DSL Router at the Main Office.
|
| When I try to connect from the Branch Office, I get the message that the
| remote side isn't responding.
|
| Any ideas?
|
| --Brian
|
| | > this may help. quoted form http://www.ChicagoTech.net
| >
| > How to Setup A Site-to-Site VPN Connection
| >
| > To setup a Site-to-Site VPN Connection , you may need to configure two
| > windows servers for the Answering and Calling Routers. Here are the
steps:
| >
| > 1. Run RRAS, on Configuration page, select LAN routing.
| > 2. Configure VPN on the Answering Router.
| > 3. Configure the Demand-dial Interface on the Answering Router.
| > 4. Configure VPN on the Calling Router.
| > 5. Configure the Demand-dial Interface on the Calling Router.
| > 6. Confirm the Remote Access Policy Configuration on the Answering and
| > Calling Routers.
| >
| >
| > --
| > For more and other information, go to http://www.ChicagoTech.net
| >
| > Don't send e-mail or reply to me except you need consulting services.
| > Posting on MS newsgroup will benefit all readers and you may get more
| help.
| >
| > Robert Lin, MS-MVP, MCSE & CNE
| > Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting
on
| > http://www.ChicagoTech.net
| > This posting is provided "AS IS" with no warranties.
| >
| > | > >I need just a simple VPN connection between two sites.
| > > Is there an easy to follow walk-through somewhere that tells how to
| setup
| > > just a simple VPN like I need?
| > >
| > > Here's what I have and need to do:
| > >
| > > Main Office
| > > ------------
| > > Windows Server 2003
| > > Exchange Server 2003
| > > Active Domain
| > > Internet Connection: DSL through DSL Router. DSL currently setup to
| > > forward
| > > ports for http, e-mail, etc to the Win2003Server.
| > >
| > > Branch Office
| > > --------------
| > > Windows Server 2003
| > > Workgroup (unable to use AD for a reason)
| > > Internet Connection: DSL. No separate router. DSL into NIC1 on
| WinSrv03.
| > > NIC2 to LAN.
| > > WinSrv03 has RRAS setup for NAT to allow users access to the internet.
| > >
| > > Here's what I need to accomplish:
| > > ----------------------------------
| > > All I need is to have the 5 users at the Branch Office be able to
access
| > > the
| > > Exchange Server located on the Main Office network as if they were
| > > physically connected.
| > >
| > > I do not have much experience with VPNs and have had a hard time
trying
| to
| > > find an easy to follow guide to set something like this up. I don't
| have
| > > the free time to sit down and spend several hours learning everything
| > > about
| > > remote access. I need to get this setup *now*.
| > >
| > > Can anyone point me in the right direction?
| > >
| > > --Brian
| > >
| > >
| >
| >
|
|
|
 
The "Main Office" is not running ISA. The firewall is the one that is
built-in to the router (Linksys BEFSR41).

The "Branch Office" is running Tiny Firewall 6.0. (I *think* I figured out
this one, but I'm not positive yet).

--Brian

Feng Mao said:
Hi Brian,

Thank you for posting!

May I know what kind of firewall server you are using. If you are using ISA
2004 as the firewall server, I believe the below article in Microsoft
knowledge base will be helpful.

837355 How to configure a VPN server by using Internet Security and
http://support.microsoft.com/?id=837355

In ISA 2004 ISA Server Management, you can greate a VPN access rule as
Firewall Policy. You can leave the "All outbound protocols" option selected
in the "This rule applies to" list, and then click "Next". Note You can
control the protocols that the VPN clients use by modifying the access rule
after you create it.

Have a nice day!

Thanks & Regards,

Feng Mao [MSFT], MCSE
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| From: "Brian" <[email protected]>
| References: <[email protected]>
<[email protected]>
| Subject: Re: VPN Setup Q
| Date: Thu, 5 Aug 2004 11:15:38 -0500
| Lines: 92
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.win2000.ras_routing
| NNTP-Posting-Host: www.taxrfnd.com 12.15.58.45
| Path:
cpmsftngxa06.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08
phx.gbl!TK2MSFTNGP12.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.ras_routing:13799
| X-Tomcat-NG: microsoft.public.win2000.ras_routing
|
| I've played around with most of this but I *think* that my problem is with
| either the firewall software on the server at the Branch Office or with
the
| DSL Router at the Main Office.
|
| When I try to connect from the Branch Office, I get the message that the
| remote side isn't responding.
|
| Any ideas?
|
| --Brian
|
| | > this may help. quoted form http://www.ChicagoTech.net
| >
| > How to Setup A Site-to-Site VPN Connection
| >
| > To setup a Site-to-Site VPN Connection , you may need to configure two
| > windows servers for the Answering and Calling Routers. Here are the
steps:
| >
| > 1. Run RRAS, on Configuration page, select LAN routing.
| > 2. Configure VPN on the Answering Router.
| > 3. Configure the Demand-dial Interface on the Answering Router.
| > 4. Configure VPN on the Calling Router.
| > 5. Configure the Demand-dial Interface on the Calling Router.
| > 6. Confirm the Remote Access Policy Configuration on the Answering and
| > Calling Routers.
| >
| >
| > --
| > For more and other information, go to http://www.ChicagoTech.net
| >
| > Don't send e-mail or reply to me except you need consulting services.
| > Posting on MS newsgroup will benefit all readers and you may get more
| help.
| >
| > Robert Lin, MS-MVP, MCSE & CNE
| > Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting
on
| > http://www.ChicagoTech.net
| > This posting is provided "AS IS" with no warranties.
| >
| > | > >I need just a simple VPN connection between two sites.
| > > Is there an easy to follow walk-through somewhere that tells how to
| setup
| > > just a simple VPN like I need?
| > >
| > > Here's what I have and need to do:
| > >
| > > Main Office
| > > ------------
| > > Windows Server 2003
| > > Exchange Server 2003
| > > Active Domain
| > > Internet Connection: DSL through DSL Router. DSL currently setup to
| > > forward
| > > ports for http, e-mail, etc to the Win2003Server.
| > >
| > > Branch Office
| > > --------------
| > > Windows Server 2003
| > > Workgroup (unable to use AD for a reason)
| > > Internet Connection: DSL. No separate router. DSL into NIC1 on
| WinSrv03.
| > > NIC2 to LAN.
| > > WinSrv03 has RRAS setup for NAT to allow users access to the internet.
| > >
| > > Here's what I need to accomplish:
| > > ----------------------------------
| > > All I need is to have the 5 users at the Branch Office be able to
access
| > > the
| > > Exchange Server located on the Main Office network as if they were
| > > physically connected.
| > >
| > > I do not have much experience with VPNs and have had a hard time
trying
| to
| > > find an easy to follow guide to set something like this up. I don't
| have
| > > the free time to sit down and spend several hours learning everything
| > > about
| > > remote access. I need to get this setup *now*.
| > >
| > > Can anyone point me in the right direction?
| > >
| > > --Brian
| > >
| > >
| >
| >
|
|
|
 
Hi Brian,

Thank you for the clarification. As the firewall is built in the router, it
will be better to consult the router manufacture to see if it supports VPN
access. According to my knowledge, most router support VPN connection by
VPN clients. But I am not sure if your Linksys router supports VPN dial-in.

Have a nice day!

Thanks & Regards,

Feng Mao [MSFT], MCSE
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| From: "Brian" <[email protected]>
| References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: Re: VPN Setup Q
| Date: Fri, 6 Aug 2004 09:07:38 -0500
| Lines: 173
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.win2000.ras_routing
| NNTP-Posting-Host: www.taxrfnd.com 12.15.58.45
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.ras_routing:13814
| X-Tomcat-NG: microsoft.public.win2000.ras_routing
|
| The "Main Office" is not running ISA. The firewall is the one that is
| built-in to the router (Linksys BEFSR41).
|
| The "Branch Office" is running Tiny Firewall 6.0. (I *think* I figured
out
| this one, but I'm not positive yet).
|
| --Brian
|
| | > Hi Brian,
| >
| > Thank you for posting!
| >
| > May I know what kind of firewall server you are using. If you are using
| ISA
| > 2004 as the firewall server, I believe the below article in Microsoft
| > knowledge base will be helpful.
| >
| > 837355 How to configure a VPN server by using Internet Security and
| > http://support.microsoft.com/?id=837355
| >
| > In ISA 2004 ISA Server Management, you can greate a VPN access rule as
| > Firewall Policy. You can leave the "All outbound protocols" option
| selected
| > in the "This rule applies to" list, and then click "Next". Note You can
| > control the protocols that the VPN clients use by modifying the access
| rule
| > after you create it.
| >
| > Have a nice day!
| >
| > Thanks & Regards,
| >
| > Feng Mao [MSFT], MCSE
| > Microsoft Online Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| >
| >
| >
| > --------------------
| > | From: "Brian" <[email protected]>
| > | References: <[email protected]>
| > <[email protected]>
| > | Subject: Re: VPN Setup Q
| > | Date: Thu, 5 Aug 2004 11:15:38 -0500
| > | Lines: 92
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.win2000.ras_routing
| > | NNTP-Posting-Host: www.taxrfnd.com 12.15.58.45
| > | Path:
| >
|
cpmsftngxa06.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08
| > phx.gbl!TK2MSFTNGP12.phx.gbl
| > | Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.ras_routing:13799
| > | X-Tomcat-NG: microsoft.public.win2000.ras_routing
| > |
| > | I've played around with most of this but I *think* that my problem is
| with
| > | either the firewall software on the server at the Branch Office or
with
| > the
| > | DSL Router at the Main Office.
| > |
| > | When I try to connect from the Branch Office, I get the message that
the
| > | remote side isn't responding.
| > |
| > | Any ideas?
| > |
| > | --Brian
| > |
| > | | > | > this may help. quoted form http://www.ChicagoTech.net
| > | >
| > | > How to Setup A Site-to-Site VPN Connection
| > | >
| > | > To setup a Site-to-Site VPN Connection , you may need to configure
two
| > | > windows servers for the Answering and Calling Routers. Here are the
| > steps:
| > | >
| > | > 1. Run RRAS, on Configuration page, select LAN routing.
| > | > 2. Configure VPN on the Answering Router.
| > | > 3. Configure the Demand-dial Interface on the Answering Router.
| > | > 4. Configure VPN on the Calling Router.
| > | > 5. Configure the Demand-dial Interface on the Calling Router.
| > | > 6. Confirm the Remote Access Policy Configuration on the Answering
and
| > | > Calling Routers.
| > | >
| > | >
| > | > --
| > | > For more and other information, go to http://www.ChicagoTech.net
| > | >
| > | > Don't send e-mail or reply to me except you need consulting
services.
| > | > Posting on MS newsgroup will benefit all readers and you may get
more
| > | help.
| > | >
| > | > Robert Lin, MS-MVP, MCSE & CNE
| > | > Networking, Internet, Routing, VPN, Anti-Virus, Tips &
Troubleshooting
| > on
| > | > http://www.ChicagoTech.net
| > | > This posting is provided "AS IS" with no warranties.
| > | >
| > | > | > | > >I need just a simple VPN connection between two sites.
| > | > > Is there an easy to follow walk-through somewhere that tells how
to
| > | setup
| > | > > just a simple VPN like I need?
| > | > >
| > | > > Here's what I have and need to do:
| > | > >
| > | > > Main Office
| > | > > ------------
| > | > > Windows Server 2003
| > | > > Exchange Server 2003
| > | > > Active Domain
| > | > > Internet Connection: DSL through DSL Router. DSL currently setup
to
| > | > > forward
| > | > > ports for http, e-mail, etc to the Win2003Server.
| > | > >
| > | > > Branch Office
| > | > > --------------
| > | > > Windows Server 2003
| > | > > Workgroup (unable to use AD for a reason)
| > | > > Internet Connection: DSL. No separate router. DSL into NIC1 on
| > | WinSrv03.
| > | > > NIC2 to LAN.
| > | > > WinSrv03 has RRAS setup for NAT to allow users access to the
| internet.
| > | > >
| > | > > Here's what I need to accomplish:
| > | > > ----------------------------------
| > | > > All I need is to have the 5 users at the Branch Office be able to
| > access
| > | > > the
| > | > > Exchange Server located on the Main Office network as if they were
| > | > > physically connected.
| > | > >
| > | > > I do not have much experience with VPNs and have had a hard time
| > trying
| > | to
| > | > > find an easy to follow guide to set something like this up. I
don't
| > | have
| > | > > the free time to sit down and spend several hours learning
| everything
| > | > > about
| > | > > remote access. I need to get this setup *now*.
| > | > >
| > | > > Can anyone point me in the right direction?
| > | > >
| > | > > --Brian
| > | > >
| > | > >
| > | >
| > | >
| > |
| > |
| > |
| >
|
|
|
 
Back
Top