VPN +DHCP

[Dos_Box]

I am currently taking part in a trial of remote access in Lancashire, along with several other schools. The only problem I have left is that whilst I can now authenticate against my server from an external network and ping all of my network computers I cannot browse any of them. It turns out that I am not getting an IP address on my network range. On the Remote Access Policies - section of IAS I have 'Client may request an IP address set in Edit Dial in Profile.

Anywhere else I should look?

[Geoff]

No this is the way it works. There's a seperate pool of ip's dished out by the CLEO VPN server. The only thing your server is used for is authentication.

 

Use a terminal server if you want a sane way to access your internal network over the VPN.

[Dos_Box]

I use netsupport manager!

[Dos_Box]

Which works, as long as I have already logged the client.

[Geoff]

I've no idea how NetSupport works. What does it try to do? Scan the local subnet?

 

What about setting up DNS manually. Does that help?

[ChrisH]

I have DHCP relay rattling at the back of my mind when you mention this although I cant remember the ins and outs of it all.

[Geoff]

Yes thats part of the puzzle. Its call DHCP Message Relaying.

 

http://www.tcpipguide.com/free/t_DHCPMessageRelayingandBOOTPRelayAgents.htm

 

However you'd also need to to proxy ARP aswell.

 

http://www.tcpipguide.com/free/t_ProxyARP-2.htm

 

These would need to be aware of the authentication process so they knew which school to proxy DHCP/ARP too.

[tarquel]

I'm probably mixing things up here, but with the watchguard vpn/firewall/router system I have, you have to setup IP address on the local range that will be used when a remote user vpn's into the system.

 

[i think] they can't be DHCP'ed [in my case] - only static ones that you assign to each remote user you create.

 

Works fine, tho I only use VNC at the moment - as I dont to attach my personal laptop to the work domain(s) [my g/f is terrible on the internet lmao - joke]. It is some sort of virtual adapter of sorts [cant explain the terminology very well as I've been learning this as i go along lol]

 

I can expand on this if you like, but you might be on about something different lol

 

Regards

Nath.