asked on

Windows 2000 Server VPN Setup

I am trying to setup a VPN connection on a Windows 2000 Server so a mobile user can connect to a small LAN. I am not sure how difficult it is and how well it works or if this is a good solution, the other alternative would be to buy a $100 VPN client software from Netgear. It needs to be user screwup free as it is for a small office with very un-Teched people :)

I tried setting it up on the Win2K server but I am not sure what ports to open up on the firewall.

This is the setup

Mobile user with WinXP Pro >Internet> -NetgearFVS318 Router Firewall- {Windows 2000 Server}

Thanks!

SOLUTION

jdeclue

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

z969307

ASKER

J,

Thanks for your input, gotomypc did occur to me and is still an option, being a small biz, they didn't want to add on monthly fees.
Currently I've set them up to connect remotely via VNC, it is working OK, but the remote user is concerned that it is not a secure connection.

If the WIn2K option is straight forward to setup, i would like to give it a try, if you know of any resources that would be great.

Thanks

Z

jdeclue

It can be straight forward but it depends on your skill set, and ability to recover if there are errors... and you will need to open up more ports, gotomypc is very secure. VNC through the firewall is ver insecure.

So, with that said... here is the VPN Installation Walk Through straight from Microsoft, and should get you through the VPN setup ;)

http://support.microsoft.com/?kbid=308208

J

ASKER CERTIFIED SOLUTION

Eagle6990

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

z969307

ASKER

Eagle,

Thanks, that thread has the relevant soution to my issue, I will try to configure it later on and will let you know if it worked.
Just one more Q, once I setup the VPN server on my Win2k Server, and the remote client initiates a connection to the server, it would be like they are on the LAN ? would they be able to connect any machine other the Win2K server on the LAN ?

Thanks!

Eagle6990

They should be able to, that is the idea of a VPN, you are just authenticating through that particular server.

jdeclue

As the machine name must be registered with Active Directory, they cannot just use another machine and connect. The exception would be a Windows 95/98 client using NTLM V1 if that is enabled in your network. (It is by default). In that scenario they could install a VPN client to a Windows 95/98 machine and connect.

Eagle6990

If you are talking about accessing shares on other machines, you can, but the user will need to provide proper credentials when connecting to the shares.

jdeclue

My bad, I misunderstood the question... Eagle is right.

z969307

ASKER

I was testing it behind a PIX firewalland was unable to authenticate, it was trying the connection, then i tested it from a home cable conenction it worked great.
Thanks a lot Eagle!