Impossible to VPN through Internet two WIN98SE systems?

[caren103]

Two Win98SE systems connected to internet via ADSL modem.

Each system with ONE NIC card, which is connected to the modem.

Dynamic IP: NO-IP used.

No firewalls, no NAT.

Network on each system activated and running ( checked ).

Each system with a number of Folders Shared.

Access control to resources activated in Network configuration of WIN98SE.

Connection through Wingate VPN achieved. Tunnels active.

BUT, NOT possible to see through WINGATE VPN the other's system network, or see the other system's shared folders.

I think this is a very simple VPN, so WINGATE VPN should work without problems, but it DOESN'T work.


Any suggestions?


Thanks.

P.S.: RIP client V2 activated, but it doesn't mind: the VPN doesn't work.

[Pascal]

Hi,

There are a few things to check with a configuration like that:

1. If your ADSL modem performs NAT / firewall functionality for you, double check that you have the appropriate pinhole / passthrough setup for it. You need port 809 TCP and port 809 UDP (Unless you've changed the defaults) available.

2. If you have only one interface, make sure that Microsoft Networking is started / applied to your interface. This is not always the case. One quick way to test it (Although I don't know if it'll be available in Win98) is to run nbtstat -a <ip address of local machine>. E.g. "nbtstat -a 192.168.3.10". If you get a response to that, Microsoft Networking is started.

3.Try to ping the remote machine (Internal IP if possible). If the pings succeed, then it's likely that Microsoft Networking is NOT started. If they fail, then there is a problem with the routing / tunneling setup.

If you only have the two machines, do not install the RIP client on them. That is only necessary on client machines behind the main VPN nodes. (Hoster / Joiner)

[caren103]

I have followed your indications, thanks.

Everything seems OK.

BUT, not progress achieved.

I can connect with no problems to the other WIN98SE system.

I can see inside the "local network of" inside WINGATE VPN the computers, I can see the tunnels active... but:

- At the home computer ( the Local, named XERVER ) which has joined to the office computer, the office computer ( named ATLON ) appears as NOT ACCESSIBLE. If you try to open it, after a while appears a message telling if you wish to dial up to that computer as it doesn't appear to be reachable.

- At the office computer ( the master, named ATLON ): The Xerver computer it is NOT ACCESSIBLE too, and if yo try to open it, after a while appears a message telling if you wish to dial up to that computer as it doesn't appear to be reachable.


I have checked the users name, ports, firewalls, access to shared resources ( under Win98SE you only can choose access to shared resources; you can also choose control access by user, but only if when you share a resource you don't assign it to a user, as if you wish to assign a user, you need a permissions user list from a NT server ( I don't know if a Linux server would do the job ).

I have also noticed that when you mark at the Wingate Logon "use current Windows login", even if you have login Windows with a user name, ALWAYS appears the message 'there was a problem connecting to the server. No username given'.


Please, if Wingate VPN is supposed to work to join two WIN98SE computers, tell me how, because until now this have become a nightmare, and my company is pressing me to find a solution.

Regards.

[adrien]

Hi

If the ADSL modems use PPPoE there could be an issue with MTU being reduced - this means that the maximum sized packets you can send is reduced by 8 bytes because of the PPPoE overhead.

the way to test if this is a problem is with ping.

Can you ping one VPN machine from another by IP?

If so, then try sending bigger and bigger pings up to about 1500 and see where it stops getting through. to do this, you use the ping command like so:

ping 192.168.1.1 -l 1400

where you would substitute the IP address for whatever the internal IP address is on the other machine.

If you can't even do a normal ping of one machine from the other, then are the tunnels set up properly? Not showing in stasis or anything like that?

Adrien

[caren103]

Thanks again, I'll check it today.

The home computer uses a CABLE modem connected to a Belkin router.

The office computer uses an ADSL US ROBOTICS 9003 router, using PPOA.

"where you would substitute the IP address for whatever the internal IP address is on the other machine. "

As I will be pinging throuth the Internet, I suppose the "internal IP address" is the one that the ISP assigns to the router. Nevertheless, as we use the NO-IP program, I'll ping to it.

"If you can't even do a normal ping of one machine from the other, then are the tunnels set up properly? Not showing in stasis or anything like that? "

The tunnels always seem to work properly. They are not showing in statis or anything like that.

I'll post the IP ping check ( although as I said, the office ADSL connection is PPoA, NOT PPoE ).