bemara57
asked on
How do I configure 1 NIC card for internet and the other NIC card for network traffic (VPN Server)?
I have a VPN server setup on a Windows 2003 box. I just installed an extra NIC card, so now I have two. What I'm confused about is how do I configure one to be used for internet and the other to be used for the network? During the VPN setup, I did define which one is which, but I'm having a hard time to connect to the server from the internet since I think it's using the wrong NIC card. I pointed my router to the my 2nd NIC card's internal IP address, but I'm not sure if that 2nd NIC card is using the Internet or is the first one using the internet (only 1 can use the internet at a time??). Any help or direction would be greatly appreciated.
Hi bemara57
*I assume that you are talking about Routing and Remote access setup by VPN setup. Lets start from the beginning together step by step.
*You have 2 NICs with names INSIDE, which is connected to your inside network, and OUTSIDE connected directly to your modem. Modem is not connected to switch, it is directly connected to OUTSIDE.
*Your OUTSIDE interface has the gateway of modem and your INSIDE interface has a blank gateway entry. Also inside interface has the 127.0.0.1 preferred DNS server adress.
*Your inside network's computers are all configured to have the INSIDE interface IP of this server as gateway address and preferred DNS server.
*Your modem's IP is added as a forwarder in your DNS settings
Lets start RRAS config
*Start>Programs>Administra
*In left pane, you should see your server, if you cant, right-click server status then add server.
*Now right-click your server, then "Configure and enable routing and remote access". Click Next. Choose Virtual private network (VPN) access and NAT, Next.
*Uncheck the "enable security on the interface...." for now, you can set it after we establish a working structure. Choose your OUTSIDE interface here.
*Click Next till F0nish. Configuration is OK.
*Right-click both connections in my netwok places properties an click repair
Regards
*I assume that you are talking about Routing and Remote access setup by VPN setup. Lets start from the beginning together step by step.
*You have 2 NICs with names INSIDE, which is connected to your inside network, and OUTSIDE connected directly to your modem. Modem is not connected to switch, it is directly connected to OUTSIDE.
*Your OUTSIDE interface has the gateway of modem and your INSIDE interface has a blank gateway entry. Also inside interface has the 127.0.0.1 preferred DNS server adress.
*Your inside network's computers are all configured to have the INSIDE interface IP of this server as gateway address and preferred DNS server.
*Your modem's IP is added as a forwarder in your DNS settings
Lets start RRAS config
*Start>Programs>Administra
*In left pane, you should see your server, if you cant, right-click server status then add server.
*Now right-click your server, then "Configure and enable routing and remote access". Click Next. Choose Virtual private network (VPN) access and NAT, Next.
*Uncheck the "enable security on the interface...." for now, you can set it after we establish a working structure. Choose your OUTSIDE interface here.
*Click Next till F0nish. Configuration is OK.
*Right-click both connections in my netwok places properties an click repair
Regards
ASKER
MrHusy thanks for the great steps, it's exactly what I needed. I have a question that's causing me confusion though. All my inside network computers are pointing to my DNS/Domain Controller for ther preferred DNS and to the router as the gateway. So from what I understand what you're saying is to point away from my DNS server and use this new VPN server as the new DNS server for all my company computers, and as the new router/gateway?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I cleaned up your steps and found this guide:
http://searchnetworkingchannel.techtarget.com/general/0,295582,sid100_gci1232005,00.html
*Modem is not connected to switch, it is directly connected to OUTSIDE interface.
*OUTSIDE interface has the gateway of modem and preferred DNS of Domain Controller/DNS Server.
*INSIDE interface has a blank gateway entry and preferred DNS of Domain Controller/DNS Server.
*Modem's IP is added as a forwarder in your DNS settings (Start>Programs>Administra
*You must configure all your computers' (including your servers) gateway address as the INSIDE interface IP of RRAS server and preferred DNS of Domain Controller/DNS Server.
*Right-click both connections in my netwok places properties an click repair.
I'll try it and let you know how it goes. THANKS!!
http://searchnetworkingchannel.techtarget.com/general/0,295582,sid100_gci1232005,00.html
*Modem is not connected to switch, it is directly connected to OUTSIDE interface.
*OUTSIDE interface has the gateway of modem and preferred DNS of Domain Controller/DNS Server.
*INSIDE interface has a blank gateway entry and preferred DNS of Domain Controller/DNS Server.
*Modem's IP is added as a forwarder in your DNS settings (Start>Programs>Administra
*You must configure all your computers' (including your servers) gateway address as the INSIDE interface IP of RRAS server and preferred DNS of Domain Controller/DNS Server.
*Right-click both connections in my netwok places properties an click repair.
I'll try it and let you know how it goes. THANKS!!
Hi bemara57
How is the process going? Any errors that I can help?
Regards
How is the process going? Any errors that I can help?
Regards
Many thanks for the suggestions. The second port is mow connected to the LAN, but, unfortunately, none of the clients can see it.
If, on a client, I enter the IP address of the second ethernet port (the LAN one) then I get the SBS welcome page. However, the internal web pages such as companyweb can't be displayed and the client can't see any files on the server.
If, on a client, I enter the IP address of the second ethernet port (the LAN one) then I get the SBS welcome page. However, the internal web pages such as companyweb can't be displayed and the client can't see any files on the server.
I'll have to wait until I get into the office to see how it works MrHusy thanks for the great insight!
Girvine,
do an ipconfig /all and see what settings your computers are picking up via DHCP. See if you can ping the servers either by IP or name, etc.
do an ipconfig /all and see what settings your computers are picking up via DHCP. See if you can ping the servers either by IP or name, etc.
If you wanna change which NIC will be gate for internet, change defoult gateway on this card (and remove defoult gateway on second one). If you connect to the internet via router or dsl adapter, then IP of router/dls is a def. gateway.
Adio!