Server 2003 VPN behind nat and multi firewalls?
Posted on 2006-07-15
Ok here is my nightmare...
I have a static IP at the house
It hits a redhat box that is my ISP
He NATs through his network to a microwave tower
My microwave tower radio has a static IP
172.16.112.xxx on the WAN port
It then connects to a Linksys WRT54GS Firmware Version: v4.71.1
It has a static IP of 192.168.2.XXX and is NOT serving DHCP.
Server 2003 Standard
NIC 1 - NC 100 static IP 192.168.0.2
NIC 2 - Intel Pro 100 static IP 192.168.0.7
Both NICS are pluged into a Linksys switch which is uplinked into the linksys router
DHCP running and is serving 192.168.0.xxx scope
VPN/NAT is configured.
The access policies where not there so I had to create one
I used the wizy wiz to create the profile and then activated it.
Here is the forwarding from my radio tower to my Linksys:
192.168.2.xxx TCP+UDP 3389 Terminal Services
192.168.2.xxx TCP+UDP 47 Generic Rtg Encapsul
192.168.2.xxx TCP+UDP 1723 PPTP
192.168.2.xxx TCP+UDP 500 IPSec
192.168.2.xxx TCP+UDP 50-51 IPSec
192.168.2.xxx TCP+UDP 20-21 FTP
Here is the port forwarding on the linksys: (Both = TCP and UDP)
20 to Both 192.168.0.xxx
1723 to Both 192.168.0.xxx
500 to Both 192.168.0.xxx
50 to Both 192.168.0.xxx
47 to Both 192.168.0.xxx
3389 to Both 192.168.0.xxx
Here is what I get:
Connecting to the VPN server by IP address within the LAN
I am able to connect
can not navigate the lan nor get to the internet
Connecting via my cell
It rips through the Connecting although it never connects
It just sits at verifing user name and password.
Here is the linksys incoming log
Incoming Log Table
Source IP Destination Port Number
the source IP address is the microwave tower/gateway
This tells me that the Linksys is receiving the request and processing
I do have all the VPN stuff enabled on the linksys
The best I can tell is that I am pounding on the VPN server
but the VPN server is not responding, or I have everything hosed and need to just start over
with a new build.
Could anybody make a sugestion as to where to start?
I may be a little slow responding and testing as I can only work on this issue
in the evenings and weekends.