My problem is by using 2 Netgear DG834 I have established a reliable tunnel but I cannot access the resources on My SBS 2003 or get the all the devices appearing on the same LAN I am a novice hence the picture to best discribe my network.
From remote site I... Ping 192.168.0.1 =success
192.168.0.2 = success
192.168.16.2 =Fail
So I assume I need to change some settings in the server to gain access to the client computers in that domain.
From any client computer at main site I can access the router and the printer at the remote site. I have succesfully added the printer at the remote site to one of the clients at the main site and printed a test page.
Main site computers are Vista
Remote site is XP Pro
Main site is a domain
Remote site is workgroup
Any help please.
My Network Map
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
DG384's aren't really business class routers. I would only use NetGear's blue metal box-type devices (ie... FVS318).
But you might try following the directions in this document to see if it will work for you:
http://filedb.experts-exch
Jeff
TechSoEasy
Why are you running two NICs in the SBS machine?
As it stands, your VPN tunnels only expose the "Public" side of the SBS machine to the remote site. AND that bit is working so if you are going to stick with the two-nic configiration, the problem is with the SBS config not with the firewalls, you need to configure the security on the SBS to expect Workstations to be connecting from the "public" side.
I don't ever use a two-NIC config so I can't be definitive - you might jsut try turning off Windows Firewall on the server...
Or, make things simpler, disable one of the NICs, and just have a *single* LAN connection on the "office" network - taht LAN has all your local workstations on it AND is the destination lan for the VPN from the remote office. Job done.
TechSoEasy
Thanks for your link but I already have that document its was that I followed when setting up the gateway.
ccomley
Your right in all the research i have done the best/only solution was to move to one nic which i have done and still messing a bit with the configuration. Come across a problem. With my 2 nic config from a client when i go to network places and click on another client it would just open. Now it promtps for username/password.
My network says connected but not authenticated.
has this occurred because I have gone from a secure network to one not so?
So I just reread your question and I have a question...
"Remote site is workgroup"
Why? You should never allow non-domain computers to access your LAN via VPN because you have no control over these machines and you are effectively opening up your network to malicious attacks and viruses.
Also... if they are not members of the domain, then how are you wanting to access the resources of the SBS?
Now, with regards to connectivity...
I would agree with ccomley that you really don't need a TWO NIC configuration on your SBS. What's happening here is that the VPN connection is terminating at the Main Office Router and isn't able to go beyond. You could resolve this by configuring static routes, but that would effectively bypass any "benefit" you get from the second NIC (the benefits of which are pretty slim to begin with). So I would suggest that you remove the second NIC, change the Main Office's LAN IP to 192.168.16.1 and plug it into the switch that all the rest of the computers are plugged into.
Jeff
TechSoEasy
Thanks Both
I made a big hash of it all and ended up having to rebiuld my DNS.
Finally today i am over to one nic with office lan on 192.168.16.1 and remote on 192.168.3.1 all computers on lan (domain) talking.
I bought a remote computer to main site put it onto domain and returned to the remote site.
VPN tunnel connected can log onto domain but as soon as windows XP opens its says its disconnected from the server and is working offline. I can,t access my sql 2005 database at the main office or com with it via ODBC no matter what type of account i use.
Any help please
If you can't get it working through the Netgear-hosted tunnels, then can you get it working by having the "server" end netgear do VPN passthro and enable VPN hosting on the SBS box, then use the Windows connection tool on XP to connect it directly to the server? L2TP isn't as secure as IPSec but you CAN imit the passthru on the Netgear to only allow the traffic in from your known remote address(es).
I'll go back to my original comment that the router's you are using aren't designed for business use. My guess is that the VPN is terminating at the router and not passing through the proper NTLM authentication. So I'd agree with ccomley that if you are going to keep those particular devices in place, you would be better off not using them for your VPN connection, but rather to connect directly to the SBS.
For instructions on how to configure that, please see http://sbsurl.com/vpn
Jeff
TechSoEasy
Business Accounts
Answer for Membership
by: wamdPosted on 2009-01-30 at 14:18:38ID: 23513626
Sorry I miss wrote the fail ping it was 192.168.16.2 = Fail