Help with SBS 2003 Site-to-Site VPN

Discussion in 'Windows Small Business Server' started by Peter Moser, Jan 12, 2005.

  1. Peter Moser

    Peter Moser Guest

    I am seeking help with a site-to-site VPN configuration using SBS 2003 and 2
    Netgear FVS318 VPN routers to allow remote site computers to access the SBS
    resources at the primary site. Briefly, the network setup is:

    Primary site
    SBS Server:
    2 NICs
    NIC 1:
    Name: Internet Router Connection
    IP: 192.168.0.10
    Mask: 255.255.255.0
    Default Gateway: 192.168.0.1

    NIC 2:
    Name: Server Local Area Connection
    IP: 192.168.1.1
    Mask: 255.255.255.0
    Default Gateway: None

    Internet Gateway/Firewall/Router
    Netgear FVS318
    IP: 192.168.0.1
    Mask: 255.255.155.0
    Internet IP: Static IP assigned by ISP
    Configured with port 1723 forwarding to 192.168.0.1

    FVS318 VPN Configfuration:
    Tunnel accessible from any local address
    Tunnel can access a subnet of remote address
    Remote LAN start IP: 192.168.2.0
    Remote LAN IP subnet mask: 255.255.255.0
    Secure Association: Main Mode
    Perfect Forward Secrecy: Enabled
    Encryption Protocol: AES-256


    Remote site
    Internet Gateway/Firewall/Router
    Netgear FVS318
    IP: 192.168.2.1
    Mask: 255.255.255.0
    Internet IP: Dynamic IP assigned by ISP
    Configured with port 1723 forwarding to 192.168.2.1

    FVS318 VPN Configfuration:
    Tunnel accessible from any local address
    Tunnel can access a subnet of remote address
    Remote LAN start IP: 192.168.0.0
    Remote LAN IP subnet mask: 255.255.255.0
    Secure Association: Main Mode
    Perfect Forward Secrecy: Enabled
    Encryption Protocol: AES-256

    A VPN tunnel is established between the 2 FVS318 routers and the SBS Server
    responds when 192.168.0.10 is pinged from the remote site. However, shares
    on the the 192.168.1.1 address does not respond to ping and SBS resources
    cannot be accessed by the remote site computers. The remote site computers
    were made domain members at the primary site prior to being transported to
    the remote site. Any suggestions would be greatly appreciated.

    Thanks!

    Peter Moser
    Studio GP
     
    Peter Moser, Jan 12, 2005
    #1
    1. Advertisements

  2. Marina Roos [SBS-MVP], Jan 15, 2005
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.