Koozali.org: home of the SME Server

help for VPN setup

Gianni Boscarino

help for VPN setup
« on: April 28, 2003, 11:43:54 AM »
Hi all,

Please help a newbie here with the setup of a VPN on SME 5.6, and if there are any pitfalls I should be aware of


Thanks and regards in advance


Gianni

Ray Mitchell

Re: help for VPN setup
« Reply #1 on: April 28, 2003, 06:26:16 PM »
Dear Gianni

You do not need to setup anything on the sme box except to specify the "number of pptp clients" in server manager remote access panel (at least 1).
With sme server v5.6 apply Update 4 which fixes some pptp problems.

Make sure that your local Windows workstation has 128 bit encryption, all standard instals of Win 95 and Win 98 & Win 98SE require a DUN update, different updates apply to each OS version so make sure you get the right one. Win2KSP2 and Win XP should be OK out of the box. Without the correct encryption installed the VPN connection will disconnect almost immediately.

On your Win PC setup a VPN connection in Networking with a hostname like www.yourdomain.com (of the remote server).

When you logon to your local PC you must use a username and password that is valid on the remote sme server as well as using the same username and password to establish the VPN connection. Remember to establish your Internet connection first.

To map a drive on the remote server do
net use M: \server IP\ibayname
eg net use M: \192.168.X.X\data
or to map a drive on workstations on the remote network do
net use N: \workstation IP\sharename
eg net use N: \192.168.X.65\station5

Of course you will need to determine the IP of each remote workstation you wish to connect to, using winipcfg or ipconfig (or ipconfig /all). Mapping connections using servernames is not supported.

Hope this helps
Regards
Ray Mitchell

Gianni Boscarino

Re: help for VPN setup
« Reply #2 on: April 29, 2003, 06:49:06 AM »
Hi Ray,

Thanks for that info.  My goodness, the SME server is really good, no need to say what kind of procedure you have to go through to setup a VPN in Win2000, do I??

Also, I failed to mention, what port do i need to open on an ADSL router in order to let VPN traffic through??


Thanks again and regards

Gianni

Ray Mitchell

Re: help for VPN setup
« Reply #3 on: April 29, 2003, 08:12:26 AM »
Well those parts I'm still learning about so I did a search on "VPN ports" and found this thread which appears to answer it. There are lots of answers in these forums just remember to search using "all dates".
http://forums.contribs.org/index.php?topic=17203.msg66850#msg66850

Author: Julie Random (jrandomauATyahoo.com.au)
Date:   04-24-03 22:09

PPTP requires
IP Protocol 6 (TCP) port 1723 and
IP Protocol 47 (GRE)

Check your router for the ability to Portfwd GRE packets

Happy using
Regards
Ray

rob Wellesley

Re: help for VPN setup
« Reply #4 on: April 29, 2003, 10:27:59 AM »
Gianni Boscarino wrote:

 what port do i need to open on an
> ADSL router in order to let VPN traffic through??
>

Better still Gianni, Build your server as a Gateway server (two NICs) and let SME be the firewall. When you open or close any service thru the Server-manager the firewall will be opened and closed appropriately. Just open all ports on your DSL Router (or create a DMZ to your server if your router allows)

rob

Randall Perry

Re: help for VPN setup
« Reply #5 on: April 30, 2003, 01:04:34 AM »
I wrote some procedures for setuping up the client portions here:
http://www.domain-logic.com/support/secure_tunnel.htm

(the link is also on the e-smith site).