Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

ok here is the deal. I have a Windows 2008 R2 server with RRAS installed configured for VPN. I also have DHCP running. On my DC I have AD running and they're connected with my domain. I am only using one NIC though.

As a client I have Windows 7. So I tried connecting to my VPN server through my own network, which worked fine, so the setup is correct. However, when I tried connecting to my VPN server on another network, it does not work. I went to my brothers home and tried connecting to my server but it did not pass.

So on my VPN server I have ip: 192.168.2.99

At my brothers house, i did the configuration on his windows 7 and it cannot connect to that ip. I am operating on the 192.168.2.1 network and he is operating on the 192.168.0.1 network. So how do I configure his client in order to get it to work? I tried changing his ip to the 192.168.2.x network, but i am not sure you can do that. I need some help here what to do.

share|improve this question
add comment

2 Answers

So on my VPN server I have ip: 192.168.2.99

With that address nobody can reach your VPN server from the outside.

Since you're going with a single-homed approach, you'll need to setup port forwarding on the firewall in front of the VPN server to send the RRAS traffic back to that server. Then, from the outside, you'd connect to the firewall's address for VPN.

This article may be helpful: http://blogs.technet.com/b/rrasblog/archive/2006/09/20/457653.aspx

share|improve this answer
    
+1, you need to make sure you have an external IP that forwards those calls to your RRAS server otherwise you'll never get connected. I've seen setps set as vpn.ourcompany.com. –  Hondalex Aug 18 '10 at 13:18
add comment

It may be his "internet connection device". If he has DSL or Cable internet check his modem\router\firewall for a "VPN passthrough" option and make sure it's enabled with the appropriate options: PPTP, L2TP, or IPSEC.

share|improve this answer
    
I have already opened port 1723 and 47. If my brother has a 192.168.0.1 gateway, should I enter that info in my IP scope? –  SantaC Jun 12 '10 at 14:56
    
forgot to say that i am using VM ware, should I use bridge or nat? –  SantaC Jun 12 '10 at 17:43
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.