Topic: Once a VPN is established

[asterof]

So if I understand you correctly, your setup is something like this?
Code:

         /208.127.71.12>Router----\
Internet<                          >10.10.26.xxx Internal Network
         \208.127.71.14>SME Server/

_________________
Yes
That way full Internet access to the server, but Lan is fully protected


What are you using for your internal DHCP server, SME or the router?
Router

[gerd]

I would recommend to use different local address ranges; say your home network is 10.10.26-255, then your "remote network"should have an address range of 10.10.27-255. On top you have to limit the address range of your local network in order to be enable to allocate some addresses for your VPN. When you connect fm the remote PC to your local network, the "VPN Server" of you local network will consequently allocate via DHCP an address (which you have reserved) to your remote PC.

So far I do not know which software you use to establisch the VPN network - as far as the SME server is concerend, I recommend to go with VPN contrib - it is an easy exercise and it works.

gerd

[asterof]

What if I changed my local (home lan)
IP's from the 10.10.26.0-  to say 10.10.30.0-
Alowed the DHCP on the router to issue 2-100 as local dynamic IP's
and reserve all above the 100 for alocation from the VPN or other
future requirements.

[pfloor]

I would suggest you get rid of the router, it is redundant and the server does everything the router does anyway.  SME is a server, firewall, gateway and a DHCP server (plus more) all in one.

Code: [Select]

Internet<->SME (in server/gateway with DHCP enabled)<->LAN
This is the simplest method and will achieve everything you need.

[mike_mattos]

If you set your home machine to AUTOMATIC IP, and then make the vpn connection to your global IP, things will be simpler.

If you successfully create the VPN connection, you can access the SME shared ibays using the command line from Xp


NET USE Z: \\local 10 IP of the ntserver\shared Ibay name

I'm assuming your server is in a different work group or domain, so XP Explorer may not show  show the VPN resources.

[asterof]

Wont use SME as my router
Computers are prone to failure
Hard box routers are less prone
I can handle a SME box crash, but not a network crash because
the SME box went down