Solved

Netgear Router unable to VPN

Posted on 2006-11-08
6
860 Views
Last Modified: 2008-01-09
Hi There,

I wonder if anyone can assist.

I have SBS2003 with 2 nics.

Broadband connects to 1st Netgear DG834 ADSL Router which connects to my WAN nic
2nd Netgear Wireless Router connects to LAN nic.

Can anyone tell me which ports I need to open on the 1st Netgear Router?  At the moment I have ports 444, 3389, 4125 along with VPN-L2TP, HTTPS, HTTP, VPN-PPTP.

I can see the http://sbs1/remote webpage and use Sharepoint but I cannot physically VPN on the server thus unable to map drives.

Any tips greatly received.

Thanks
George.
0
Comment
Question by:geeing
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 77

Expert Comment

by:Rob Williams
ID: 17900996
Assuming you are using the SBS VPN (default Windows PPTP) you need to forward "VPN-PPTP". It requires port 1723, and GRE. GRE is not actually forwarded but allowed to pass, often by enabling an option named "PPTP pass-through". However, on the Netgear routers I have used, if you forward the predefined PPTP service, rather than a creating custom rule for port 1723, GRE is automatically enabled.

Note: VPN's do not usually work well through multiple NAT (Network Address Translation) devices such as routers. You need to forward the traffic on the DG834 ADSL to the 2nd Netgear and then from there to your SBS, but this may not work. The proper way to do it is to put the ADSL router in Bridge mode, configure the WAN interface of the 2nd Netgear to connect to your ISP, and then forward your PPTP traffic to the SBS.
0
 

Author Comment

by:geeing
ID: 17902323
RobWill,

Ideally how should the network be setup?  Ditch one of my routers?
0
 
LVL 77

Accepted Solution

by:
Rob Williams earned 250 total points
ID: 17902724
>>"Ditch one of my routers?"
No, not necessary. The ideal set up is a modem and a single router. Putting the DG834 ADSL Router in Bridge mode effectively makes it a basic modem, by disabling all the router and DHCP functions. Quite an acceptable practice.
0
Are You Headed to Black Hat USA 2017?

Getting ready for Black Hat next week? Kick things off with the WatchGuard Badge Challenge and test your puzzle and cipher skills. Do you have what it takes to earn our limited edition Firebox Badge? Get started today - https://crimsonthorn.net

 

Author Comment

by:geeing
ID: 17904873
Aha.. I see what your saying.  I'll do that.  By the way.. I rerun the VPN Wizard and it all works!!  Crazy Technology.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 17905679
Thanks geeing. If it works, wonder if the modem is already in Bridge mode. It is very common to do that.
Cheers.
--Rob
0
 

Author Comment

by:geeing
ID: 17906121
Just tried from different location and getting error 800, but I think might be due to firewall... but I'll check out some different things.. thanks again
0

Featured Post

Are You Headed to Black Hat USA 2017?

Getting ready for Black Hat next week? Kick things off with the WatchGuard Badge Challenge and test your puzzle and cipher skills. Do you have what it takes to earn our limited edition Firebox Badge? Get started today - https://crimsonthorn.net

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've had to do a bit of research to setup my VPN connection so that Clients can access Windows Server 2008 network shares.  I have a Cisco ASA 5510 firewall.  I found an article which was extremely useful: It had a solution if you use ASDM to config…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question