Solved

VPN - SBS2003 - Accessing Shared Files / apps on PC's Conected to Lan

Posted on 2007-04-03
14
303 Views
Last Modified: 2010-08-05
I have a SBS 2003 in my office with a Broadband connection and a public Ip address. Twin NIC's in the server (Lan/Wan). I have run the VPN wizard on the SBS and from home have set up a VPN (WAN Miniport PPTP) to my office IP Address useing the default settings. This authenticates ok and I can access the exchange email / public folders ok. BUT I cant see any folders on the server nore any other pc's on the network , what do I need to do ?
0
Comment
Question by:daniel8193
  • 7
  • 6
14 Comments
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18846706
Are you trying to browse to these folders? Try connecting by name and if that doesn't work by IP (LAN IP) such as:
\\ServerName\ShareName
\\192.168.16.123\ShareName

If still no luck; did you create the VPN with the SBS wizard? It needs to be done in this way to properly configure the routing and firewall. Wizard is located; server management | Internet and e-mail | configure remote access
The client computer should also be done using the appropriate wizard so that name resolution will work properly; server management | Internet and e-mail | create remote access disk
0
 
LVL 4

Author Comment

by:daniel8193
ID: 18850660
Will it make a diferance that the client PC is xp home ? and can the remote access disk be on a Memory stick?
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18850812
XP home cannot join the SBS domain, but remote access by VPN is fine, so you should have no issues.

I don't know if the wizard will create the custom disk on a USB stick. Certainly can't hurt to try, and there would be no problem copying it from a disk to the USB stick for installation on the PC. I just don't recall what it requests as a media when creating the initial disk.
0
 
LVL 4

Author Comment

by:daniel8193
ID: 18960917
Couldn't create the disk ( No A Drive )  - end result is I can now see all of the shared folders on the server but cant get to any other pc's. What am I missing ?
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18961625
I too tested that and as you say you need a floppy.

Is the RRAS server handing out IP's in a different subnet than the SBS's LAN ? If so you will need to add a static route to be able to access the other machines via VPN.
0
 
LVL 4

Author Comment

by:daniel8193
ID: 18966931
OOOkkkkkk ....... New ground - how ?? please ..
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 77

Expert Comment

by:Rob Williams
ID: 18970325
:-)
There are a couple of ways to handle this.
First is the client getting an IP in the same subnet as the SBS's LAN? To check this connect the VPN and then from the client machine run at a command line:
ipconfig  /all
In the results under PPP adapter, what is the IP address. If the first 3 octets, such as 192.168.2  are the same as the LAN of your SBS, you are done. That is fine. If not you can change the IP's assigned, my choice, or set up a static route on the client or server. Probably simplest to check the subnets first and let us know the results to verify we are "barking up the right tree"
0
 
LVL 4

Author Comment

by:daniel8193
ID: 18972258
ok
Router 10.10.10.1
SBS WAN side is 10.10.10.2  
SBS LAN side is 192.168.147.1
Clinents  192.168.147.2 > 50

VPN Server  10.10.2.21
VPN Clients  10.10.2.2 > 10

Work Group PC  192.168.147.254  
(This is the one I want to be able to connect to)
It has a data base app running on it - maintained by a.n. other

Does That Help ?

0
 
LVL 4

Author Comment

by:daniel8193
ID: 18972266
opps  

VPN Server  10.10.2.21     should be  VPN Server  10.10.2.1
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18972798
Forgot last night this was SBS. Did you create the VPN using the wizard [server management | Internet and e-mail | configure remote access] ?   This should completely automate the routing. I suspect if your server is handing out IP's in the 192.168.147.2 > 50 range, that is not the case. You can make changes or add routes manually but it is strongly discouraged as it can affect other services.
0
 
LVL 4

Author Comment

by:daniel8193
ID: 18973771
Ok I've tried this and it works
VPN remote (10.10.2.2)  to SBS server    (10.10.2.1)
and
VPN Win2k Workgroup (10.10.2.3) to SBS Server

My question sssss   are -
a) can it be done better
b) How can I keep same VPN IP addres  
c) I some how need to keep the WIN2K / SBS VPN up 100% of the time If it drops I need it to reconect auto.

Any Ideas ?

0
 
LVL 77

Accepted Solution

by:
Rob Williams earned 500 total points
ID: 18984977
I assume the 10.10.2.2 client IP is not local but the PPP address assigned by the RRAS/VPN server. If so good.
a) better that what <G> not sure I know what you mean
b) To keep the same VPN addresses. The static pool assigned to RRAS will always give the RRAS/VPN server the first IP in the pool, so that should stay the same. To assign the client the same IP you do so in Active Directory, under the user's profile, on the Dial-In page near the bottom, "Assign a static IP address"
c) On the client machine, go to control panel | network connections | right click on the VPN connection/adapter choose properties | options | enable "redial if line dropped"
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 19393427
Thanks daniel8193.
Cheers !
--Rob
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Several part series to implement Internet Explorer 11 Enterprise Mode
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now