We help IT Professionals succeed at work.

IPSec Hardware tunnel to sbs 2008

Medium Priority
991 Views
Last Modified: 2012-05-06
I have an SBS 2008 with a Billion 7404VGO for Internet access. (192.168.10.0/24)
I have a remote site with XP Pro sp3 workstations. The are behind a DLINK DI 808 VPN Router. (192.168.9.0/24)
I have established a working IPSEC Tunnel between the two routers.
Setup an extra site on the SBS with the correct scope, DNS and DNS reverse DBS Settings (Done this plenty of times on SBS2003).
Problem: When the remote workstation logs on the Ip shows up in DNS OK but I can't access the workstation from the SBS. I can however ping it.
Can't access remote shares or remote printers at all.
Can't access remote workststion with a TS session from the SBS server either.
Workstation can access SBS resources without problems (including printers)
Question: Do I need to make changes to the SBS firewall or is this a router issue.
Do these routers  need more rules or routing (and what are they) for this to work or should the tunnel be an open lan connection as the name suggests?
Any idea's would be appreciated.
Olaf
Comment
Watch Question

skca54Senior Engineer
Commented:
Your VPN is only one way. You will need routing configured from the server to the workstation.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
Thanks ska, could you be more specific. Do I need to make a second tunnel for the return traffic or is there something locking it down at the server end. If I use a pptp tunnel (MS) it does not work either? (no remote shares or printers but I can ping and dns resolves)
This network is doing my head in. Normally takes me 1-2 days to get it all right but this one has kept me on my toes for 9 days now. I am too close to it.
Could you please elaborate?
Olaf
Opening firewall using GPO (You can do this manually too) fixed the issue.
Olaf
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.