Microsoft VPN behind BM 3.8 SP4

Question

Hello,
We have a big problem in our network. We need a VPN tunnel to a organisation
which demands Microsoft VNP. Before we ran VPN at Bordermanager, this worked
fine.
Now we installed VPN directly at the involved Win2K server and created a
filter exeption for port 1723 (src. port <All>, dest. port 1723) at the BM.
First there was not any connection from 'the outside world', but after
creation of this filter exception we get as far as 'verifying username and
password'. But this times out and auto redial starts.
Who can help us out? Has this to do with the fact that BM NAT does not
support GRE? An if yes, is there a workaround to bypass this?
Thanks in advance,
Ivar Woudsma
Netherlands

Answer 1

In article <95OMh.1577$[email protected]>,
Support-forums.novell.com wrote:
> Who can help us out? Has this to do with the fact that BM NAT does not
> support GRE? An if yes, is there a workaround to bypass this?
>
GRE breaks going through NetWare NAT. There is no workaround if passing
the traffic through NetWare.
You have two choices - don't do NAT on NetWare (not likely to be an
option for several reasons, unless you just use proxy), and bypass the
server.
You could:
a) put a pc on the outside of BMgr, remote control to it from inside the
LAN, and launch the VPN from there, or
b) put in a router/firewall that has GRE support over NAT in parallel
with BMgr, then static route the traffic through that link from the BMgr
server, for the VPN endpoint address.
Both the above require an available public IP address.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***