IPSec Hardware tunnel to sbs 2008

Posted on 2009-02-14
Last Modified: 2012-05-06
I have an SBS 2008 with a Billion 7404VGO for Internet access. (
I have a remote site with XP Pro sp3 workstations. The are behind a DLINK DI 808 VPN Router. (
I have established a working IPSEC Tunnel between the two routers.
Setup an extra site on the SBS with the correct scope, DNS and DNS reverse DBS Settings (Done this plenty of times on SBS2003).
Problem: When the remote workstation logs on the Ip shows up in DNS OK but I can't access the workstation from the SBS. I can however ping it.
Can't access remote shares or remote printers at all.
Can't access remote workststion with a TS session from the SBS server either.
Workstation can access SBS resources without problems (including printers)
Question: Do I need to make changes to the SBS firewall or is this a router issue.
Do these routers  need more rules or routing (and what are they) for this to work or should the tunnel be an open lan connection as the name suggests?
Any idea's would be appreciated.
Question by:Olaf De Ceuster
    LVL 10

    Assisted Solution

    Your VPN is only one way. You will need routing configured from the server to the workstation.
    LVL 22

    Author Comment

    by:Olaf De Ceuster
    Thanks ska, could you be more specific. Do I need to make a second tunnel for the return traffic or is there something locking it down at the server end. If I use a pptp tunnel (MS) it does not work either? (no remote shares or printers but I can ping and dns resolves)
    This network is doing my head in. Normally takes me 1-2 days to get it all right but this one has kept me on my toes for 9 days now. I am too close to it.
    Could you please elaborate?
    LVL 22

    Accepted Solution

    Opening firewall using GPO (You can do this manually too) fixed the issue.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer:…
    You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now