Question : SBS 2003 VPN Connection Problem. I can PING SBS WAN Connection, But Can't PING SBS LAN Connection.

Hi,

My SBS 2003 Server is setup as follows :-

2 Network Card Configuration.

WAN - Connected to Internet via Cisco Firewall.

LAN - Connected to Local Network Via Switch.


I've just setup a Remote User VPN using SBS's own VPN Setup.

When connected I can't access any LAN resources, but I CAN PING the WAN COnnection on the Server.


I'm assuming this is some sort of VPN NAT problem.

Any Ideas?

p.s. I Don't use ISA Server on the Network.

Answer : SBS 2003 VPN Connection Problem. I can PING SBS WAN Connection, But Can't PING SBS LAN Connection.

How did you create the VPN on the SBS ?
SBS requires that the VPN be created using the Remote access wizard located; server management | Internet and E-mail | configure remote access.
Doing so will automatically configure the routing between the external and internal NICs using RRAS

However, having said that. The windows VPN requires forwarding of port 1723 and GRE (protocol 47). My knowledge of Cisco is very limited. I don't doubt you can create forwarding rules over 2 VLANs for port 1723 to their respective servers, but can you do so for GRE ? Often if GRE is blocked you can make a basic connection but not "communicate". Can you access any shares on the SBS itself?

One other thought, make sure that the local and remote subnets are different, or you will experience problems s you have described.

If you have a Cisco router, why not set up a Cisco  VPN ? More secure and efficient.