I set up a VPN on Windows Server 2008 through the Routing and Remote Access Features.
My goal is simple. When I'm connected to the VPN, I should be able to access the shares by server name "\servername\" as thought I'm on the server's LAN and when I'm not connected to the VPN, I should not be able to access them.
Unfortunately, after connecting to the server's VPN, I cannot access it.
- My user account on the server is set to allow Dial In access; hence I can connect to the VPN successfully.
- The VPN network shows up on the server in Network and Sharing Center as "RAS (Dial In) Interface (Private Network)".
- I'm not sure whether the VPN connection on the client should have the "Use default gateway on remote network" option checked. When it's checked, I lose internet access on the client, but I suspect it needs to be checked to force the SMB traffic through the VPN?
- Is it sufficient to allow "File and Printer Sharing" exceptions on the server's firewall for "Private network" profile only? I don't want those exceptions enabled on the public network, just the "RAS (Dial In) Interface (Private Network)".
- Do I need a static route to somehow get the VPN traffic to the main NIC? There's only one NIC, so do service binding affect this?
- The "Routing and Remote Access Properties" IPv4 tab has "Enable IPv4 Forwarding" checked, and the IPv4 address assignemnt is "Static address pool" with a range between 192.168.1.100 to 192.168.1.200, with an IP address of 192.168.1.0 and a mask of 255.255.255.0 (which matches the subnet mask of my main NIC).