VPN works fine on dial but not via leased line

[srajeevkumar]

Hi freinds,

I am trying to connect from a machine in the UK to our HK server via a VPN connection. The HK Server is a Windows 2003 SBS server and is also configured as a VPN server and accepts remote connections. The router at the HK end is all configured so that the relevant ports are opened etc.

(1)From my UK machine (Windows 2000 professional) I dialled up to the internet and then connected to the HK server via a VPN dialup account and got succesfully connected. I can ping the HK server and when I run the remote desktop connection client I can succesfully see the desktop of the HK server and run a terminal server session. Infact I can register the MS SQl server running in the HK server to my MS SQl enterprise manager in the UK machine etc etc. Everything works perfectly well and no problems at all.

(2)Now when I put my UK machine back to the network in use in the UK and connect to the net using our NETPILOT internet gateway I still am able to get a succesful VPN connection done to the HK Server (Well it says its connected) . But i cant ping the ip of the HK server. Nor can I run the Remote desktop connection ( terminal server client) nor can I administer the MS SQl server in the HK server.

Now the only difference between case (1) and case (2) is that in case (1) it works fine when a dialup account is used to connect to the internet and in case (2) when from behind a NETPILOT firewall when we try to access the HK server it fails.

I am quite certain that it has got to do something with the Netpilot box. Which ports do I need to open in Netpilot and for what applications to make this to work in case(2) as much as in Case(1).

Any suggestions or tips will be highly appreciated.


Rgds

Rajeev.

 

[wlandymore]

permit gre protocol
allow for port 1723 for pptp
map inside, outside static address for each side of computer accepting/making connections behind the firewall

http://www.cisco.com/warp/public/110/pix_pptp.html#netdiag

Cisco gives a pretty good representation of it done with a Cisco PIX firewall....

 

[srajeevkumar]

Hiya,

Thanks for the reply. Can you please explain mapping with reference to the following situation as an example:-

(1)The static internal ip address of HK Server is 10.0.0.200
(2)The static fixed ip address of the HK is 218.243.123.138
(not the real ip, just an example)
(3)The internal ip address of the UK client machine is 10.0.0.194
(4)The fixed ip address of the NETPILOT internet gateway we use is 242.178.87.43
(not the real ip, just an example)

When I get a VPN connect behind the Netpilot firewall and when I loook at the properties tab of the connection , it says the VPN Server ip adress as 10.0.0.201 and the VPN Client ip address as 10.0.0.203

So many ip addresses and 2 machines after all. Can you in this situation please explain what you meant by

"map inside, outside static address for each side of computer accepting/making connections behind the firewall"

Keenly looking forward to your reply...