vpn with wingate

[jeffreyloo]

is it possible to use windows vpn with wingate??(not wingate vpn)

[genie]

Windows VPN and Wingate VPN are not compatible - they use different protocols.

[Nev]

is it possible to use windows vpn with wingate??(not wingate vpn)

Hi,

By MS VPN do you mean RDP / TS for Win2k3 / XP Pro etc?

If so yes, but you will need to open a firewall port [3389] to connect, however this is very risky because it will be constantly scanned and hacked, so don't do that.

One work around is to open an un allocated port in Wingate's firewall [ENS] then redirect the packet to the network host and overide port of 3389.

There is KB articles on how to change the default ports if you want to but the above works well from a RDP client just input the host IP:PORT style.

[adrien]

Also

Windows VPN using PPTP, or IPSEC NAT-T will work through WinGate fine, i.e. you can connect to a Windows VPN with a client behind/through WinGate.

Adrien

[jeffreyloo]

Also

Windows VPN using PPTP, or IPSEC NAT-T will work through WinGate fine, i.e. you can connect to a Windows VPN with a client behind/through WinGate.

Adrien

hi does that mean windows vpn can work with wingate....i have a vpn machine sitting behind wingate.....how do i configure wingate to allow windows(windows2003) vpn traffic to pass through??

Thank You

[genie]

If you have Windows VPN client behind Wingate, then no special action is required. For the server you have to relay port 1720 TCP from Wingate machine to your Microsoft VPN server machine.

[ImmediateAction]

I think its 1723 with PPTP, and you need to make sure the "Dont translate Source IP is ticked".

ENS --> Port Security --> Add

[genie]

Thanks, that's right!

[jeffreyloo]

thank i will open the two port and try....thanks guy

[jeffreyloo]

sad to say...it is not working...
ok this is how my network runs....
windows vpn server (private ip 192.168.0.7)sits behind wingate server..
i enable port 1720 and 1723 redirect packet to 192.168.0.7 ("check dont translate source ip")....
i have set up my dns server domain abc.com to point to my public ip and wingate will do the nat and redirection....when i dial it said cannot get respond.....any help?

[adrien]

Hi

If you have "don't translate source IP checked", then WinGate must be the default gateway for the machine that you are redirecting through to - i.e. the 2003 server needs to be using WinGate as its default gateway. Otherwise the packets will come in via WinGate (and get port translated possibly etc), but the packets back will go out through the other gateway, and that breaks the NAT entry in WinGate.

Also this only works for PPTP VPNs, not IPSEC.

Adrien

[jeffreyloo]

Hi

If you have "don't translate source IP checked", then WinGate must be the default gateway for the machine that you are redirecting through to - i.e. the 2003 server needs to be using WinGate as its default gateway. Otherwise the packets will come in via WinGate (and get port translated possibly etc), but the packets back will go out through the other gateway, and that breaks the NAT entry in WinGate.

Also this only works for PPTP VPNs, not IPSEC.

Adrien

yes my vpn server is using winagte as the gateway...windows server vpn is using PPTP or IPSEC??me new to vpn