Developer Forum

Hi
I am trying to build a VPN between a client computer inside my LAN and
a VPN server on the web. Do you need to enable IP forwarding? If i
have to connect to specific ports on the VPN server how do i configue
my proxy server?
SBS 4.5.
Dial up modem (because BT has forgotten many parts of the UK).
Any ideas would help me greatly

Thanks

Al

From memory you can't from a LAN client inside SBS 4.5 - you need to go to
SBS2k or 2k3...

David

Hello Al,

Unfortunately, clients behind Proxy 2.0 cannot VPN through Proxy to a VPN
server on the internet. You will have to dial up to the internet directly
from the client and then establish the VPN connection. If you do this,
remember to disable the Winsock Proxy client on the client first.

Chris Puckett, MCSE
Microsoft Small Business Sever Support


This posting is provided "AS IS" with no warranties, and confers no rights.

Alternate solution is to drop the MS-proxy 2.0
and put an hardware firewall in front on the SBS Server

Hope It Helps
David


rights.

Other options would be to upgrade to SBS 2000 or migrate to SBS 2003 Std.
Edition or Premium Edition.

--

Hope that helps,
David Copeland
Microsoft Small Business Server Support

This posting is provided "AS IS" with no warranties, and confers no rights.






VPN
directly

Hi Again

Thank you all very much for your help.

Hi

Why does the winsock need to be disabled?

Al

Depending on what you attempt to do once VPN'ed into the remote server the
Winsock Proxy client may intercept those request and attempt to send them
via the Proxy server out across the Internet and not through the VPN tunnel
you intended. The Winsock Proxy client uses the Local Address Table (LAT)
of the Proxy server to determine what IP range(s) are "internal" and what
are "external". If the request being made is a TCP/UDP request to an IP
address that it is destined for an "external" address then the Winsock Proxy
client may send that request to the Proxy server. Other factors that can
influence the behavoir may include specific application settings,
mspclnt.ini, locallat.txt etc.

Another possible option instead of having to turn off the Winsock Proxy
client may be to configure the server/destination(s) addresses in the Proxy
server's LAT.. or in the client machines locallat.txt, or possibly depending
on the applications needed configuring the mspclnt.ini file to not have the
Winsock Proxy client redirect request from that application.

--

Hope that helps,
David Copeland
Microsoft Small Business Server Support

This posting is provided "AS IS" with no warranties, and confers no rights.






VPN
directly
rights.