Wireless VPN

[Tweeker]

I would like to improve the security of my wireless network. The access point and Win2K laptop are on the 192.168.15.0/30 network. On the wired side is the 192.168.10.0/29 network along with router 192.168.10.1 to connect to the internet. I have a Win2K server with two network cards to connect both networks with one card set to 192.168.15.1 mask 255.255.255.248 no gateway set and the other card set to 192.168.10.3 mask 255.255.255.240 with the gateway set to 192.168.10.1.

The first problem I have is with the installation on the laptop. TCP port 809 is not on the allow list in the firewall and I had to add it manually. Second is that the published routes state that there is a conflict with 192.168.15.1 although the Win2K server does not show any conflicts. Third, I can connect to most pc's and devices on the 192.168.10.0 net but I cannot connect past the router to access the internet.

The first question is what is wrong with this setup and second is it possible to connect to the internet with the laptop using this software and this network configuration?

[adrien]

OK, If I understand you correctly, you are setting up a VPN between your laptop and the machine running the accesspoint.

The problem with this, is that both these machines are on the same subnet - 192.168.15.X which will result in a routing conflict.

Furthermore, in order to access the internet, you would need to be using an option which isn't available in WinGate VPN which is "use default gateway on remote network".. although thinking about it more, since the machine 192.168.15.1 would become your default gateway it may just work... would require that the VPN client on the laptop be set to participate "local machine only" and on the server not publish any routes for the 192.168.15.x subnet.

however you may be better off if you can turn on encryption in your wireless LAN card and access point.

In order for the laptop to access the internet, a route would also be required on the gateway machine 192.168.10.1 to point to the .15 subnet via 192.168.10.3. If this gateway supports RIP listening, then it should see the RIP broadcasts made by the dual NIC machine.

Adrien