What a can of worms!!. I have 3 staff at a remote office with ADSL & Static IP on a peer to peer network. Router there is a dlink 804. One user at the remote office uses standard old MS vpn client to securely connect to HQ. HQ is adsl and static IP behind a dlink 701 router on an MS 2000 server network.
I had opened up port 1723 on the dlink 701 at HQ and pointed it to the the internal server. I gave those who needed remote access the necessary permissions. The guy at the remote office could connect and so could home users, all using the MS VPN client software with WIN98 or win2K pro. Life was simple.
Now another person at the remote office needs to VPN on to the server as well. It took me hours to work out why sometimes he could connect and at other times he couldn't. The dlink 804 only allowed one session at a time to connect to the server at HQ.
I did some research and discovered the article by Mike Fratto. I didn't understand all of it, but I figured that I have to change the 804 router at the remote office, so that two or more vpn tunnels could be initiated from the there.
I spoke to a couple of reps and ended up buying a netcomm nb3100. This supports two VPN Tunnels and a single pass through session. But it seems that I now have to make additional changes at the HQ end as well. I have to create IPSEC policies on the server and I'm not sure if I also will be forced to update the Dlink 701 router as well.
I'm tempted to run away and put PCAnywhere on the second machine instead!!
Can any one shed any light on the path to simply allowing 2 remote staff behind a NAT box to simultaneously make a vpn connection to the server which also lies behind a NAT box. I don't mind utilising the new NB3100, provided that I don't need 2 of them!!
server----701---------CLOUD--------804---peer2peerRemote
Cheers
I had opened up port 1723 on the dlink 701 at HQ and pointed it to the the internal server. I gave those who needed remote access the necessary permissions. The guy at the remote office could connect and so could home users, all using the MS VPN client software with WIN98 or win2K pro. Life was simple.
Now another person at the remote office needs to VPN on to the server as well. It took me hours to work out why sometimes he could connect and at other times he couldn't. The dlink 804 only allowed one session at a time to connect to the server at HQ.
I did some research and discovered the article by Mike Fratto. I didn't understand all of it, but I figured that I have to change the 804 router at the remote office, so that two or more vpn tunnels could be initiated from the there.
I spoke to a couple of reps and ended up buying a netcomm nb3100. This supports two VPN Tunnels and a single pass through session. But it seems that I now have to make additional changes at the HQ end as well. I have to create IPSEC policies on the server and I'm not sure if I also will be forced to update the Dlink 701 router as well.
I'm tempted to run away and put PCAnywhere on the second machine instead!!
Can any one shed any light on the path to simply allowing 2 remote staff behind a NAT box to simultaneously make a vpn connection to the server which also lies behind a NAT box. I don't mind utilising the new NB3100, provided that I don't need 2 of them!!
server----701---------CLOUD--------804---peer2peerRemote
Cheers