VPN ports through two routers

[KimLeece]

Hi all,
I am trying to make a VPN connection between two computers that are both behind routers. I have forwarded the ports at the server end (1723 and 47)- do I need to forward any ports at the client end?
Thanks for any help-

KimLeece.

 

[Dmasch]

No you should just have to put on the clients end the IP address (public) and the router with the public router should foward the request to the VPN server that is behind it.

 

[KimLeece]

Thanks for the reply -
I have all the ports correctly forwarded but it doesn't work! I installed PCAnywhere and that works fine so I know that I configured the router correctly. Do you think that this could have something to do with my ISP? I am using the MS VPN adapter - is there any way to to change the default port 1723 in case my ISP blocks VPN traffic?

Thanks for any help-

Kim Leece.

 

[Dmasch]

I do not know if you can change the default port number. I've run across major ISP that due block that port. You may want to give them a call and see if they do first. So from the outside you can run PC Anywhere thru the router, so we know you have that port forward done correctly. You should just have to due the same with the 1723 port to your server. What errors are you getting? Some routers don't allow the pass of the VPN protocal either. You may want to check that out with your router vender to make sure it does support that feature.

Another test that you could run just to make sure that the VPN server is running ok is to try and make a VPN connection from inside your network, that way you can narrow it down to either your something in the router setup or your ISP.

 

[TMorgan]

If you are using Windows systems, You will have to add the path from the remote VPN internal LAN, lets say 192.168.1.0 to the routing tables so that it points to the VPN's gateway IP. Other wise it will use your default gateway witch is probably your router to try and make the connection. Go to a command prompt and type "route print" to see the table, "route/?" for options and syntax. Add this to any PC's that the incoming vpn will be requsting info from.
Example:
route add 192.168.1.0 mask 255.255.255.0 10.170.0.3 -p

192.168.1.0 Remote VPN Lan
10.170.0.3 local VPN internal address
-p Makes it a persistant route

Any traffic not using the 192.168.1.0 ip will still use your default gateway. Hope this helps, I use two Linksys BEFVP41 in a simular config, one on a DSL and one on a DMZ on a second router port. It works great!