Using VPN in XP through NAT or SSH using MS PPTP

Hello there...

I'm currently trying to connect to my office by vpn, but are having som trouble...
Here is the situation:
  - I'm trying to use windows XP's build in vpn client to connect to the office (recommeded by their IT-department).
    The office is running af VPN server on a windows NT mashine, properly the build in one from ms.
  - I'm behind a router, on a 192.168.2.x network (this can't be changed).
    The office network is also 192.168.2.x
    So, I can actually connect to the office VPN, but every time I'm trying to connect to a server, my own router relays the message back into my own network (due to 192.168.2.x on both sides)
    I need to get by this!!!

So there are some possible solutions, but haven't any idea of getting any of them to work...
-  Somehow it must to possible to get by my own router directly, though NAT or something!
-  I have the possiblility to connect with ssh to my school, and with putty portforward the ms PPTP ports... But the ms PPTP (or windows xp VPN client) also uses other protocols I don't know if I'm able to forward... like GRE!
With this last solution I actually came to verifiring password... But never never got any answer! With Ethereal is saa this may to to do with a "PPP LC" protocol message, which is not forwarded to the office... why??

If anybody can help me I would be very greatfull... Maybe u can help me with the above solutions... Maybe u have another idea!!

Regeards
   Smoller
smoller_Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

smoller_Author Commented:
Oh... in my ssh solution I'm allready forwarding the following ports 47, 137, 500, 1701, 1723, 4500... Don't ask why (different tries)!!!

Bliksted
0
lrmooreCommented:
Your ssh solution won't work as you have determined - due to the requirement for GRE which is protocol #47, not port 47. GRE has no concept of ports, so you can't use any type of port forwarding.
You have hit upon one of the problems with VPN's and IT departments not thinking things through when they setup their LAN IP address schema. If they won't change theirs, and you can't change yours, there is not a lot that can be done.
Since you can't change your local LAN, perhaps you can put something else between your PC and your local LAN, like another broadband router. Plug its WAN port into your local LAN, plug your PC into the LAN port on the router. You can now make your new local LAN subnet anything you want. With PPTP passthrough enabled on the routers, even though you would essentially be going through two nat devices, it should work.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VPN

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.