Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Remote Printing
- Thread starter drpyle
- Start date
John Lewis
Programmer
Two problems here.
First, you need to allow remote users access to your network. A VPN server will solve this problem very nicely. Your router does not have a VPN server, but it can forward traffic to a VPN server inside your network.
You have a couple of options.
1) You could replace your router with a model that does have a VPN server. I don't think Linksys has a model that does wireless and VPN server in one, but you could insert a BEFVP41 in front of the WRT54G (on the public internet side) and use the WRT54G as a wireless bridge.
2) You could configure a VPN server inside your network. This can be just a bit more complicated, but not to the point that it is difficult. You almost certainly have something that can function as a VPN server.
My preference would be a Linux server. If you have one and a bit of Linux knowlege (or a desire to learn), this is the way to go. It doesn't sound like this is an option for you, as you stated "no servers". If you are considering adding a Linux server, this might be a good time.
Next preference would be a recent server version of Windows (2000 or 2003 -- NT 4.0 will work). This server can run provide other services, except Exchange Server on the same machine is not a good idea. Again, you stated "no servers". I would not consider adding a Windows server just for VPN services due to the cost.
If you have neither of those, any recent Windows machine can act as a VPN server, but you will be limited to one connection at a time. It is not possible to setup multiple VPN servers behind a single public IP address. If you can live with one user connecting at a time, this might be a good option for you.
The second problem relates to sharing your printers. The "no servers" statement is directly after the printers, so on the first reading I took it that you were not sharing printers. I'm not certain now, but that should be easy to overcome in any case.
First, you need to allow remote users access to your network. A VPN server will solve this problem very nicely. Your router does not have a VPN server, but it can forward traffic to a VPN server inside your network.
You have a couple of options.
1) You could replace your router with a model that does have a VPN server. I don't think Linksys has a model that does wireless and VPN server in one, but you could insert a BEFVP41 in front of the WRT54G (on the public internet side) and use the WRT54G as a wireless bridge.
2) You could configure a VPN server inside your network. This can be just a bit more complicated, but not to the point that it is difficult. You almost certainly have something that can function as a VPN server.
My preference would be a Linux server. If you have one and a bit of Linux knowlege (or a desire to learn), this is the way to go. It doesn't sound like this is an option for you, as you stated "no servers". If you are considering adding a Linux server, this might be a good time.
Next preference would be a recent server version of Windows (2000 or 2003 -- NT 4.0 will work). This server can run provide other services, except Exchange Server on the same machine is not a good idea. Again, you stated "no servers". I would not consider adding a Windows server just for VPN services due to the cost.
If you have neither of those, any recent Windows machine can act as a VPN server, but you will be limited to one connection at a time. It is not possible to setup multiple VPN servers behind a single public IP address. If you can live with one user connecting at a time, this might be a good option for you.
The second problem relates to sharing your printers. The "no servers" statement is directly after the printers, so on the first reading I took it that you were not sharing printers. I'm not certain now, but that should be easy to overcome in any case.
- Thread starter
- #3
Thanks mhkwood for your response. The "no servers" I mentioned was that there are currently no PC's acting as servers in the office. We use laptops and connect to the internet through the linksys. The printers are connected via wireless print servers. I can add a PC like an older pentium for what you suggest, but not sure exactly how. The one connection at a time would be fine. Also either option of linux or windows would do, but I am more versed on windows. Would windows 2000 pro work or does it have to be 2000 server? Can you give me more in depth "how to" info or point me in the right direction please? This is all new to me but I like to learn.
Thanks in advance.....
Dennis
Thanks in advance.....
Dennis
John Lewis
Programmer
As long as one incomming connection is sufficient, W2K pro should be fine.
Configure W2K just as you normally would. It should have a static IP address on the same subnet as the rest of your network.
Add a user to the system to serve as the user for VPN access. You can configure as many users as you like if you want to give each of your remote users their own user/password combination.
Configuring the server is fairly simple. Start the New Connection Wizard (Start-->Settings-->Networking and Dial-up Connections-->New Connection).
Click Next on the first pane, select "Allow Incoming Connections" and click Next.
Do not mark any devices on the next pane (Devices for incoming connection) and press Next.
Mark the box for "Allow Virtual Private Connections" and press Next.
Mark the users you wish to allow to access the connection. As a general rule, Administrator and Guest should be disabled for security reasons. Click Next.
Highlight TCP/IP and click Properties. On the box that pops up, mark "Allow callers to access my LAN". Mark the box for specify TCP/IP addresses and assign a range of 5 addresses in the from and to boxes. These address must not be used by any other device on the network. Click OK. Make sure that at least TCP/IP is marked on the Networking Components page and click Next.
Type a name for the connection and click Finish. As the button would indicate, you are finished (at least with the server).
On your router, you will need to:
Enable PPTP passthrough
Forward port 1723 to the IP address of the server
Exclude the addresses assigned to the VPN server from the DHCP server (if you are using DHCP to assign addresses).
If your ISP assigns you a static public IP address, you will be able to connect using the IP. If you do not have a static public IP, you will need to use a dynamic dns service (such as to allow your users to connect. The router will need to be configured to update your IP address with this service.
Your print servers will need to have their default gateway set to the VPN server to provide a route back to the VPN clients.
That really should do it. If you already have the W2K system, best just to dig into it and ask questions as they come about.
Configure W2K just as you normally would. It should have a static IP address on the same subnet as the rest of your network.
Add a user to the system to serve as the user for VPN access. You can configure as many users as you like if you want to give each of your remote users their own user/password combination.
Configuring the server is fairly simple. Start the New Connection Wizard (Start-->Settings-->Networking and Dial-up Connections-->New Connection).
Click Next on the first pane, select "Allow Incoming Connections" and click Next.
Do not mark any devices on the next pane (Devices for incoming connection) and press Next.
Mark the box for "Allow Virtual Private Connections" and press Next.
Mark the users you wish to allow to access the connection. As a general rule, Administrator and Guest should be disabled for security reasons. Click Next.
Highlight TCP/IP and click Properties. On the box that pops up, mark "Allow callers to access my LAN". Mark the box for specify TCP/IP addresses and assign a range of 5 addresses in the from and to boxes. These address must not be used by any other device on the network. Click OK. Make sure that at least TCP/IP is marked on the Networking Components page and click Next.
Type a name for the connection and click Finish. As the button would indicate, you are finished (at least with the server).
On your router, you will need to:
Enable PPTP passthrough
Forward port 1723 to the IP address of the server
Exclude the addresses assigned to the VPN server from the DHCP server (if you are using DHCP to assign addresses).
If your ISP assigns you a static public IP address, you will be able to connect using the IP. If you do not have a static public IP, you will need to use a dynamic dns service (such as to allow your users to connect. The router will need to be configured to update your IP address with this service.
Your print servers will need to have their default gateway set to the VPN server to provide a route back to the VPN clients.
That really should do it. If you already have the W2K system, best just to dig into it and ask questions as they come about.
- Status
Similar threads
- Locked
- Question
- Locked
- Question
- Locked
- Question