Suggestions on setup greatly appreciated

[Chris T]

My good fellows,

As the only remotely technologically-inclined individual in my small company, I am attempting to set up a connection between the main office PC and the boss's laptop when he is away from the office. We are currently opening a Maine location which is about 90 miles north of Headquarters, sand since we operate on Quickbooks it is paramount that the Big Boss have access to the main QB file on the host machine.

The network is this:

Tempermental Satellite carrier access to the main PC, with the other computers connected to the LAN by ICS (internet connection sharing). All PCs run Win2K Pro, except the boss's laptop which is an XP Pro machine. This XP Pro laptop is what will be connecting to the LAN, specifically the main PC holding the Quickbooks data file.

I have run the VPN client on my own machine to get access to the help file, and while I would like to think I understand most of it, I am aware that a full, functioning setup is beyond me. I am a bit confused on the exact TCP/IP settings are needed on the main office PC that will serve as the VPN server.....specifically the DNS settings.

Once the main PC is correctly configured, do I then install the same VPN software on the XP laptop while it is connected to the LAN? Will it then automate the connection between the machines so that the next time that laptop is connected, say, at his house via cable modem, all he would have to do is run the client and it would provide access to the office PC?

Obviously not. I cannot fathom it being this easily configurable. I am just honestly hoping that the effective setup is not beyond my abilities - hence the reason and need for this post. I would greatly appreciate any and all help/advice that the fine people of this forum can offer a poor English major struggling to make sense of a technical issue.

Thanks guys. I appreciate it even if this thread drops without response.

[MattP]

Hi Chris,

It should actually be quite a simple setup although there may be a couple of complicating factors in your scenario, namely the fact that you're using MS ICS and a satellite connection. That said, I don't really anticipate too much trouble.

As long as your main office pc (the WinGate VPN host) has a connection to the LAN and a connection to the internet you should be in business. You will need to also install the WinGate VPN-only software on the big boss' laptop.

Actually, once the setup is complete and you know that the connection works, it should just be as simple for him to connect to the LAN as it is when he's in the office. I've included some instructions below for you, I hope they help:

To set up a VPN you will need a WinGate VPN host and a WinGate VPN joiner, our VPN will not communicate with a third party VPN. Also, both ends of the VPN must have the appropriate licensing, in your case the trial license is sufficient, but when that expires you'll need to take that into account.

Make sure you have internet access on both the host and the joiner
On the host:
Double click the VPN in the system menu
Select VPN's to host and click Add
Enter a name for the server and select the level of local participation, in your case select Local Network
Go to the policies tab and enter a user or group for access
Go to the X509 certificate tab and click Generate Certificate
Enter a passphrase
Enter details
Click Finish
Click ok to generate the certificate, this can take a couple of minutes and you will receive a system message notifying you when it has been done.
Click Export configuration and enter the host server's external IP address or domain name
Either email the config file or save to a floppy for import to the joiner

On the Joiner:
Click VPNs to join
Select import Config
Select your configuration file
Enter a username and password (must be a valid username on the host)
Choose level of participation
Click ok

Your VPN should now be setup, to join it go to the network tab, right click the VPN and choose connect. You should see the connection and be able to browse the remote LAN.

If you have a firewall in front of the WinGate server, (not the WinGate firewall) you'll have to open port 809 TCP/UDP and map the connection through to the WinGate server.

Also, please note that the two LANs must have different subnets, ie 192.168.0.1 (host) and 192.168.2.1 (joiner) for the connection to work properly.

Good luck!

Matt

[Chris T]

Hi Chris,

It should actually be quite a simple setup although there may be a couple of complicating factors in your scenario, namely the fact that you're using MS ICS and a satellite connection.

To be honest this also makes me wary. The Satellite is terribly unreliable and I can only assume that one dropped packet will time out the secure connection - let alone periods of inactivity due to the wrong cloud covering, etc. On the offchance that I can successfully set this up, it will be due in no small part to your excellent instructions above, and for which you have my most unreserved gratitude.

I will post back with updates on my success/failure as they occur. Again, thanks!