Topic: remote access to sme server

[lional]

I set up the sme server at the client and I am battling to setup the remote access.
They have the following setup
a mega 100wr wireless router. They had no firewall from their service provider so we got them a linksys rs042
I have no experience in setting up the remote access but what we need to accomplish is the following:
They would like to remotely access the sme server to view certain files and there groupware that they will begin to use for their mail interface
Must we use the linksys as the router to access the internet or do we still use the mega 100wr. I already have a dyndns address and I can get to the mega 100 wr router.
Please can anyone help me to accomplish the above I have been battling for about 4 weeks with this

Regards

Lional

[zoxer]

Hello, what equipment you use for internet connecton (cable modem, wireless link) ?  If you use a cable modem or similar equipment you do not neet a router as you can set the SME server to work as a gateway and server and you should connect it to your internet connection directly and setup the dynamic dns directly on the Sme server, if you do not have a fixed ip address.  The SME server has allready an integrated firewall if you have concerns about security

Regards
Zoxer

[lional]

Our internet connection is a cable modem. We have already setup the sme that is acting as a file server in the server only mode. we did not want to have the firewall and the data on the same machine. So they purchased a linksys rs042. I would like to replace the standard issue router with the linksys but I am having problems connecting to my service provider and there support department leaves a lot to be desired. Once I have accomplished that then I can try to vpn from the linksys into the sme server. Am I right in my thinking

[janet]

lional

I am battling to setup the remote access.
I have been battling for about 4 weeks with this

That's a lot of battling for something which is straighforward, routine & supported in sme & should only take about 5 minutes to setup.
Have you really done some reading and found out what you need to do ?

You also have to be much more specific when telling us what your problem is.
Tell us what you have done (exactly), tell us what errors you get or messages you see, and tell us what does not happen that you expect to happen etc etc etc.
If you don't tell us, don't expect us to guess.

See this for VPN tips, is VPN what you are trying to do ?

http://wiki.contribs.org/VPN_practical_tips

The Howto and FAQ and Wiki (for the Manuals) are linked at the top of this Forum, so they should be very easy for you to read and find answers.
An "advanced" search of the Forums on VPN might also be a good idea.

[idp_qbn]

Lional,
consider using OpenVPN on the SME box, and forward port 1194 on your Mega router (or Linksys box) to the SME.
Follow the instruction at http://sme.firewall-services.com/spip.php?rubrique3 to install it on SME.

The important bit is getting Port 1194 forward from the modem/router to the SME.

The home site for OpenVPN is http://openvpn.net/index.php

I use this to give me access to a remote SME server for both administration purposes and email from the built in mail server. My PC at home becomes another node on the remote network and I can make use of whatever network resources I have permissions for.

Cheers
Ian

[lional]

Hi Mary
I have set up dyndns, I have got dyndns ending up at my router. What I would like to do is to get from my router to my sme box.
I am fairly new to sme so how would we use the built-in functionality to let this happen with sme.
Would it be safe to have the firewall and the data on the same box
what I am trying to achieve is to let my client access his sme server remotely to access files, email through egroupware.

Any help would be appreciated

Thanks

Lional

[janet]

lional

I have set up dyndns, I have got dyndns ending up at my router. What I would like to do is to get from my router to my sme box.

You need to configure the router to forward ports to your sme server, for http web pages forward port 80 for https forward port 443 for VPN forward port 1723 + router must support gre protocol

See the VPN tips link provided earlier

Would it be safe to have the firewall and the data on the same box

Yes many people use sme this way, in that case configure your server in server gateway mode and connect your server server directly to the cable modem, router not needed.

what I am trying to achieve is to let my client access his sme server remotely to access files, email through egroupware.

egroupware is a web application so as long as port 80 is forwarded to your server (and possibly port 443 will be needed for secure connections) then it should work OK

Configuration of your network will be easier if you use sme in server gateway mode.

Note that sme has built in VPN functionality, so no real need to install additional contribs, just enable VPN on a per user basis in server manager, also read the VPN tips for potential issues.

[lional]

Thanks mary I do appreciate tour help so far, but once I have opened the ports how do I reach them from my dyndns address.
I have specified my router ip address at dyndns and I am still reaching my router and not being forwarded to my sme server.
I also have the issue that I still need my router because in South Africa our cable is RJ11 and not RJ45
Will this still work in server gateway mode

Thanks in advance

Lional

[idp_qbn]

If you are still using the Mega-100wr router, this link may help

http://portforward.com/english/routers/port_forwarding/Telkom/Mega-100WR/Echolink.htm

and you can get the manual/quick start guide here http://www.telkomphones.co.za/mega100.htm

Mary's advice about using VPN (built in to SME) is accurate and should get you connected.

I use OpenVPN which is an add-on to SME which is slightly different but seems to work well.

Good luck - and read Ch 11 of the Administration manual http://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter11

Cheers
Ian

[janet]

lional

once I have opened the ports how do I reach them from my dyndns address.

You need to forward ports to your smeservers local IP address eg forward port 80 to 192.168.1.1 etc etc
Read the manuals link provided by Ian.
Only opening ports on your router is not sufficient, they must be forwarded.

...our cable is RJ11 and not RJ45
Will this still work in server gateway mode

You do not use a separete router (meaning dhcp server, login client, firewall etc) before your sme server, when it is in server gateway mode, as all these functions are built into sme server.

[idp_qbn]

Lional, Mary,
As far as I can tell, the Mega-100WR is a wireless modem/router. The RJ11 is the phone line IN. There are 4 x RJ45 10/100 Ethernet ports and a Wireless Access Point. This seems a typical set up being flogged (sorry, sold) in Australia at the moment. So, you could connect the SME and another 3 computers using cables - or add a 10/100 switch and have lots! Wireless, of course, is more limited since all PCs using the WAP share the bandwidth and cut it dramatically.

There should be nothing difficult or unusual in forwarding the ports from the modem/router to the SME box. Although, I must admit, it took me a little time to understand the manual for mine (a NETGEAR) regarding Port Forwarding. Still, one of the links I found for you shows you how.

Good luck
Ian