Laptop at Office and Home

[Ken in Montana]

I have a small office LAN with one server behind a DSL Modem/Router. Modem/router 192.168.1.1
Server 192.168.1.2 with windows ICS (Static IP)
Work Group XX
Serving IP's for the Office LAN

On that LAN I have a laptop getting a dynamic IP from the serer.
laptop at home gets 192.168.1.x
Work Group XX

At night I take the laptop home where I have a
DSL Modem 192.168.22.1

Wireless router
Internet Port 192.168.22.2
Gateway 192.168.22.1
LAN IP 192.168.0.1
serving IP's for the Home LAN

So laptop at home gets 192.168.0.x
Work Group XX

I want to set up a VPN server at the office and be able to connect the Laptop to the Wired Office LAN, Home Wireless LAN, or to the Office VPN from the home or dial-up locations.

Will the workgroup name affect the connections?
Will I be able to configure this without having to change setrtings each time I connect to a LAN.

[MattP]

Hi Ken,

This is a perfect setup for the VPN, because the laptop is getting the IP addresses dynamically you don't have to change anything, just take the laptop home and connect to the VPN. Because you don't need to map ports on the outgoing connection there is nothing to configure, the connection will just pass through the router to the internet.

The workgroup names won't affect the VPN at all.

[Ken in Montana]

Thanks

I was trying to set this up about a year ago and ran into too many problems. Now I have a new ISP and DSL at both locations so...here we go again.

I downloaded the current version of the software, but it won't activate.

Any suggestions.

I just want to get it set up and make sure it works with the trial software.


Ken

[Ken in Montana]

P.S.

It comes back as ' Unable to connect on Port 80....Error 12002...Use e-mail activation'

Thanks

[MattP]

Ok, so if you open the License Manager, go to the screen where you can select your license type and click the configure button, select Activate license by email and click next. You will see a screen of encrypted text, Ctrl-C to copy and Ctrl-V to paste into an email, send it to activation at qbik dot com and we'll send you back a file.

[Ken in Montana]

I have Wingate VPN installed on the server and the trial license activated.

This is the setup.
DSL Modem with ethernet connection to server 192.168.1.1
LAN Card in Server for Modem 192.168.1.3
LAN Card for office network 192.168.0.1 static
Other machines on LAN 192.168.0.xxx DHCP AUTOMATIC

Now that Wingate VPN is installed, my local machines can no longer access the internet.

How do I fix that first?
Do I need to install WingateVPN on all of the local machines to access the internet?

[genie]

No, you don't - how does the routing table on Wingate machine and on one of the clients look like?

[Ken in Montana]

Just got it fugured out a minute ago.

I looked back at my threads from last year and found the cure. ENS settings. Disable support for multiple subnetworks - Oct 12, 2004 - Pascal-

But now i am having trouble getting a trial key to work on my remote machine. Ipasted the key I got via e-mail, but is says invalid on the mobile machine. I have requested an additional key via e-mail. Is there a faster way to get the trial key?

[adrien]

Normally internet-based activation takes a few seconds. An activation generated on one machine can't be used on any other machine, so you will need a new activation for the laptop.

Note that the activation client uses the internet connection settings of the machine it is on. If this is set to go through a proxy this could be causing problems if that proxy is not available.

Adrien

[Ken in Montana]

I am still waiting for e-mail activitions and passwords to purchase the keys. It seems to be taking a long time.

If I send you a vpn config file, can you set it up to see if it is working on this end?

e-mail address to send it to ? You can reach me at p-archat msn dot com.

[adrien]

Hi Ken

The other email address you are using for your order is not able to be delivered to.

I have connected to your mail server from about 3 different ISPs, and it immediately terminates the connection, so you won't be receiving any mail from anyone, unless there is some policy on there relating to all the IPs I tried.

Adrien

[adrien]

PS

so probably easiest option is to retry your order with your msn address.

Adrien

[Ken in Montana]

OK - I now have the trial keys installed and internet connections on both machines. ( dial-up on the laptop)

I exported the setup....Set it up on the client....

I tried to connect to the VPN Host, but got 'connection to remote host timed out"

Now what?

[adrien]

Hi Ken

have you set up port forwarding in your DSL modem for port 809 TCP and UDP to go through to your VPN server?

Otherwise your DSL modem will be acting as a firewall, and blocking incoming connections from the VPN client.

Adrien

[Ken in Montana]

Yes

Actiontec GT701-WG Modem Router
Ports 809 TCP & UDP set to forward to 192.168.0.1 (VPN Host)

[Ken in Montana]

PS

I am using no-ip.com for a name server.

process-arch.no-ip.com

Pings OK

[MattP]

Hi Ken,

I just tried a telnet connection to that address on port 809 and it would not connect, do you have any other firewalls running on the WinGate server? Connection timed-out usually indicates that a firewall is blocking the connection.

[Ken in Montana]

Hello Matt

The only firewall on that server is the Modem/Router. It has a built in firewall. I don't think I can turn it completely off, but since port 809 is forwarded, I would think that would pass it through the firewall.

The virus scanner is also disabled.


Ken

[adrien]

Hi Ken

It sounds like the port forwarding is on your home network's DSL router, which won't help, since your laptop at home needs to connect to the VPN server at work. That means your DSL modem at work needs to have the port-forwarding set up on 809 TCP/UDP to go through to the VPN server on your office network.

Or have I got your config misunderstood?

Adrien

[MattP]

If you look on the WinGate firewall tab do you see a connection from 210.55.214.35 on port 809? If you do then that would be from me. Please check that port 809 is open in the WinGate firewall (Extended Networking-->Port Security), it should be there because WinGate opens the port automatically when you create the VPN.

[Ken in Montana]

Yup -

A little confused.

Office -
DSL Modem 192.168.1.1
Port 809 forwarded to 192.168.0.1
Office Server / VPN Host 192.168.0.1
Laptop dyanmic IP at office and home

I was trying to connect with the laptop via a dial-up at the office so I could see both machines at once.

Now I am at home with another
DSL modem... 192.168.22.1 and a
A Wireless Router 192.168.33.1
trying to log on to the VPN

[Ken in Montana]

Matt -
Unfortunately I am no longer in the office.
I did not see anything on the Wingate VPN Firewall tab before I left.
I tried to telnet the machine as well, but might have been doing it wrong.

Ken

[Ken in Montana]

More Info -

The Host machine is running Win2000 pro
No other firewall software.

[Ken in Montana]

Any other ideas for things to look for?

[jamesc]

1. What Virus Scanner are you using on the WinGate VPN Host?

2. Here is a detailed guide for port forwarding WinGate VPN on an Actiontec GT701-WG Modem Router: http://www.portforward.com/english/rout ... te_VPN.htm

[Ken in Montana]

Hello -

1. Norton Antivirus 2004 Professional Edition - Disabled

2. I had already found the link to portforward in one of Wingates setup guides. Very helpful, but have already done exactly what it shows.

Is there something I can do from the VPN server to send something out and recieve it back on Port 809?

What is the correct syntax for telnet testing?

Thanks

[adrien]

Hi Ken

I'm a bit concerned about the IP addresses on your office LAN,

the LAN-side IP of the DSL modem is 192.168.1.1, however you have it forwarding ports to 192.168.0.1

These 2 IP addresses are on different logical subnets, so your DSL router will probably not have a route for 192.168.0.X, and will therefore send the packets out to the default route (back out to the Internet).

Does your WinGate machine have 2 ethernet interfaces? If so, then you need to forward to the IP address of the interface that is on the same subnet as the DSL router.

Adrien

[Ken in Montana]

Yes - 2 Ethernet Cards

DSL Modem 192.168.1.1
DSL Ethernet Card 192.168.1.x dynamic

LAN Ethernet Card 192.168.0.1

When you select 'Allow Internet Connection Sharing' on the DSL Card Win2000 tells you to configure the second card to 192.168.0.1 (and does it for you)

I do have 809 forwarded to 192.168.0.1 (Computer LAN Card)
I will change it to 192.168.1.2 and assign a static IP to that card.

[Ken in Montana]

That did not work out.

I had no access to the internet after assigning a fixed IP to the DSL NIC.

[adrien]

Hi Ken

so how many lan cards do you have in the WinGate VPN machine on your office LAN?

Adrien