Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

ok here is the deal. I have a Windows 2008 R2 server with RRAS installed configured for VPN. I also have DHCP running. On my DC I have AD running and they're connected with my domain. I am only using one NIC though.

As a client I have Windows 7. So I tried connecting to my VPN server through my own network, which worked fine, so the setup is correct. However, when I tried connecting to my VPN server on another network, it does not work. I went to my brothers home and tried connecting to my server but it did not pass.

So on my VPN server I have ip:

At my brothers house, i did the configuration on his windows 7 and it cannot connect to that ip. I am operating on the network and he is operating on the network. So how do I configure his client in order to get it to work? I tried changing his ip to the 192.168.2.x network, but i am not sure you can do that. I need some help here what to do.

share|improve this question

So on my VPN server I have ip:

With that address nobody can reach your VPN server from the outside.

Since you're going with a single-homed approach, you'll need to setup port forwarding on the firewall in front of the VPN server to send the RRAS traffic back to that server. Then, from the outside, you'd connect to the firewall's address for VPN.

This article may be helpful:

share|improve this answer
+1, you need to make sure you have an external IP that forwards those calls to your RRAS server otherwise you'll never get connected. I've seen setps set as – Hondalex Aug 18 '10 at 13:18

It may be his "internet connection device". If he has DSL or Cable internet check his modem\router\firewall for a "VPN passthrough" option and make sure it's enabled with the appropriate options: PPTP, L2TP, or IPSEC.

share|improve this answer
I have already opened port 1723 and 47. If my brother has a gateway, should I enter that info in my IP scope? – SantaC Jun 12 '10 at 14:56
forgot to say that i am using VM ware, should I use bridge or nat? – SantaC Jun 12 '10 at 17:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.