Help req'd setting up VPN's

[Deano]

Hi, I'm looking for anyone with any experience setting up VPN's please...

In the office I have a server that is hosting SQL files.
My employees are using Windows 7 64-bit machines that I have provided for them to access these SQL files using a custom program, which is no problem when they're in the office operating over the LAN except they're quite often out on the road or operating from cafes, libraries, etc.

I would like to use the built in VPN functionality of the Billion 7404VGOX (pictured below) to allow them access to the LAN, so they can run the program which calls up "\\server\files\" and they can work for me from wherever they have an internet connection.

My research indicates that L2TP/IPSec is the most secure, so this is the method I'd like to use. Below is an image of the configuration page, so this is what I need to set:



Username: (For example: username)
Password: (For example: password)
Connection Type: Remote Access
Type: Dialin
Private IP Address Assigned to Dialin User: 192.168.1.48
Tunnel Authentication Tickbox(??)
Secret: (For example: 111222333)
>IPSec: (I'd like this active)
>Authentication: MD5 (?)
>Encryption: 3DES (?)
>Perfect Forward Secrecy: None (?)
>Pre-shared Key: [I(For example: PRESHAREDKEY)[/I]

Now from the Windows 7 machines from "Network & Sharing Centre", I create a new VPN connection and can set the following:



I don't know which to use, either PRESHAREDKEY or 111222333 in the preshared key field - but either way, upon connection it just says "Host cannot be reached". I'm attempting this from an outside IP - I have essentially disabled the firewall for testing purposes and opened up port forwarding to the router for ports 500, 1701, 1723 & 4500.

Or have I got all this completely wrong and I need additional software to make this work?

Any help would be greatly appreciated!
Thanks all

[lee]

You shouldn't have to forward ports from the router to itself? Try remove those rules, and see if you have any luck. Next step is to do a port scan of your router's external interface from outside of your network, and confirm those ports are open.

[D'Artagnan]

Are you attempting to connect to the external IP address or a domain name? As Lee suggests opening ports shouldn't be required assuming the router in question is the external facing router and not behind some other firewall.

[I Fancy Holidays]

Easy way is to just use PPTP

[Deano]

You shouldn't have to forward ports from the router to itself?

No, you're right; originally they weren't forwarded to itself given that the router itself it the ADSL interface, but that didn't work so I tried anyway.

do a port scan of your router's external interface from outside of your network, and confirm those ports are open.

Good idea - I will try this soon.

Easy way is to just use PPTP

Not secure enough for my liking.

[Deano]

I remember someone saying they loved the VPN functionality of the Draytek modems; do you just use the PPTP, or L2TP over IPSec? LAN-to-LAN or LAN-to-PC? I'd like to use the inbuilt VPN dialler of Windows to connect to the LAN using a my Draytek Vigor 2710vn; thus far I've been unsuccessful and I'm baffled as to why.

(My original query is long taken care of, this is now for another project -- I ended up rejecting the Billion; it's shit, I'd never recommend them.)

[D'Artagnan]

I use drayteks in both teleworker and LAN-to-LAN configs for clients. Works brilliantly. Do you have static ips?

The teleworker mode from windows is simple enough. Create a teleworker account on the router, set up the VPN in windows and connect. Happy to help if needed.

[moshriff]

Not sure if this helps you: http://forums.whirlpool.net.au/archive/1650994

Check out the links to the help articles that user Nrgy posted, has lots of info on setting up VPN's on those devices