dyndns - do i need it

hi i have configured a windows 2003 network with an isa 2006 acting as my firewall, but the isa2006/external nic2 recieves a dhcp: address from my residential netgear router built-in dhcp box.  that also provides my isp internet ip address on which is the device ip of my netgear router box so that i can receive internet access.

my address is supposed to be dynamic according to my isp, but everytime i check over the last 4 months it has never changed!!!!

i have however also configured my network to allow vpn remote access from home and i have also configured my laptop for vpn connection by using the same address: but it keeps failing!!

during a local test i plug my laptop into my netgear router box to test my vpn and i receive the correct: 10.0.0x/24 network address from my internal dhcp successfully and can open up network places and see my domain name but to test properly from a remote location is my issue!!

questions 1.  i have been told that this works but wanted to know if by using 'dyndns', would then rectify my problem ?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DynDNS is used when your external IP ( changes and it auto updates the DNS with the new IP.

If you external is and you not connecting to it by IP then DynDNS won't help you.

An easier way to gain access to your own network would be LogMeIn unless there is a real reason you need to vpn into your network.

Several things can come into play here.

1) Being the ISP blocks the ports your VPN needs to function.
2) Your router needs to be configured to route to the correct internal address (I count two private networks - is private as well as the 10/24.) My guess is something could be misconfigured on your router)

You could draw a simple diagram because what you posted is a little confusing. You have a network that you can vpn into but you also have 10.0.0/24 that you can vpn into.. pick one.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

there are a lot of points of failure from external network. first of all you need to check what all ports are required for your application to work and check if you can telnet them to your machine (laptop) .

If telnet works then you should be ok but if telnet fails you need to check with you ISP if port are blocked or not. also can you share you trace route out put from external network.

Also check if external to internal  IP address NAT is working all the way to your desired machine IP that is from your external IP of 92.x.x.x to your 10.x.x.x

for further troubleshooting.
mikey250Author Commented:
hi, (apologies for not sending a diagram as not drawn one out)

ok - i did not think i needed 'dyndns', just thought i would ask!:)  ive already had advice from others and my setup is ok!!!

- internal network: 10.0.0.x/24
- isa2006/internal nic1: - no dg & static route points to
- isa2006/external nic2: - successfully recieves isp info already!!!
- cisco layer 2 switch: ip default-gateway

note: all machines have internet access successfully and all i now wanted to do was allow a vpn to connect as have already added vpn configurations on isa 2006.

note: when i was trying to use radius i remember ports: 1645/1646 but not using radius now as been told is not needed as i already have a domain ad network so authentication is already done.

note: i cannot telnet or tracert as my isa 2006 is not configured to allow this!!!

ideally my isa2006/external would have a static address but due to plugging into my netgear router box which actually provides the internet access, this was the only way i could do this!
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

Well you may want to check your netgear config as they normally have firewall's on them and they are turned on.

Getting access to the internet is easy.... it's getting to the inside of your network thats a challenge. most firewall's block incoming traffic and allow all outgoing traffic by default.

Depending on your VPN setup on the ISA you will need to open/forward ports to it or ensure all traffic is going to your ISA box and the netgear router having the firewall disabled or not blocking the ports the vpn server and client need. As netballi mentioned you would need something listening on the ISA server in order for you to test where the failure is. generally telnet won't work on vpn servers.
mikey250Author Commented:
as this question regarding 'dyndns' has been answered i will create another question regarding what settings ive enabled on my physical netgear router.

comments have been appreciated!
If you want to take comments to the other question, can you provide a link?

Anyway, my stab at an answer would be
1:  You dont need DynDNS until and unless your REAL ip from your ISP changes.  If it doesn't happen frequently, you might find it just easier to change the remote computer's VPN connection IP, so that you can still connect..  The only thing DynDNS would do would be to help you always connect to a consistent NAME (like "myprivatevpn.dyndns.org" or something) instead of always changing the underlying IP address in your configuration..

The only other thing I'd say is...  WHY do you have a netgear box?  Is the NetGear your dsl modem or something?  If your NetGear is getting it's IP from another box with Ethernet then you should just get rid of it, and put the ISA server external NIC straight to it, so that you can get a REAL IP address on the external ISA NIC.  That's going to be the easiest answer...  If you can't do that, because your Netgear IS your dsl modem or something, then you'll need to put that device into "bridge" mode so that the ISA can get the real address instead of the double NAT'ing you have going on now.  You COULD get it working the way you have it, but there's going to be a bunch of stuff you need to manually configure to forward on the Netgear to make the VPN work (and it will be different depending on what kind of VPN you're doing...  PPTP, L2TP, HTTPS/SSL, etc)  The ISA will largely take care of that, if you can get it's external NIC to have a real IP address...

mikey250Author Commented:
hi thanks your 1st point 1 above is correct as i also understood 'dyndns' to be used only for intermitant change of ip addresses but someone mentioned the other day that it may do other stuff.  as it turns out i did not need it!!

i cannot get rid of my residential netgear router box as my isp provided this as it is directly connected to the internet.  I only wanted to learn how to configure isa 2006 so i had connect isa 2006 to my netgear router box.

in the end on saturday i resolved my problem and can logon remotely via my laptop/mobile phone connected and i can also visit a friends house and gain internet access and logon via vpn successfully!!

i had not put 'ppty port 1723' on my netgear router box, which allowed my vpn to work via remote vpn location.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.