Which IP address?

  • Thread starter Thread starter MC
  • Start date Start date
M

MC

Hi
I have successfully setup VPN, i.e. remote clients could login and access
resources etc. However, the setup was a straight forward one where I had a
Win 2000 server running VPN and ISA with two nics- one nic connected
directly to the internet (with a public IP) and the other to the LAN
(private IPaddress). If I place a router/ firewall on to the network and
have a Win 2000 server as a VPN server, with no ISA, how would I configure
the IP's of the two nics since the server is no longer connected directly to
the internet? One nic must be configured for the LAN but what about the one
as internet connectivity now goes through the router. This is assuming that
the relevant VPN ports are open on the router.

I have set both nics with pivate IPs and the VPN server will authenticate,
in fact I have disabled one of the nics and the server would still
authenticate but remote clients cannot see the virtual network.

Hope this makes sense and would appreciate all your help. TIA
 
MC said:
(private IPaddress). If I place a router/ firewall on to the network and
have a Win 2000 server as a VPN server, with no ISA, how would I configure
the IP's of the two nics since the server is no longer connected directly to
the internet? One nic must be configured for the LAN but what about the one
Click to expand...

Here is what we did. We assigned a static WAN address to our
router/firewall. The VPN server has a static private IP address. Open
port 1723 (for PPTP) on your router/firewall, and point it at the static
private IP for your server.
 
OK...when I run the RAS wizard it would ask for the internet nic, so
presumably I would associate that with the internal nic, right? If that's
the case, does that mean there is no need for a second nic?

Thanks again
 
That is correct. If you already have an Internet router connected to the
Internet, you do not need two NICs in the RRAS server. You can have it on
the LAN with one NIC and configure it as a remote access server. You can
then forward PPTP (tcp port 1723) from the router to the server and make
your VPN connection to the router's public IP.
 
Back
Top