 |
Technical Support
Support Policies
Solution In Focus
The SysDump utility
The MAPI Test utility
The Userdump Utility
Kerio MailServer
Manual
Quick Checklist
Product Knowledgebase
Kerio WinRoute Firewall
Manual
Product Knowledgebase
WinRoute Pro
Manual
PPPoE
Product Knowledgebase
Kerio Personal Firewall
Manual
Product Knowledgebase
WinRoute Lite
Manual
Kerio Network Monitor
Manual
|
 |
Server-to-Server VPN
WinRoute Pro Part
- Install WinRoute Pro on both ends (if not already installed).
- On both ends go to the WinRoute administration, go to Settings - Interface table.
- You should see three adapters - the LAN network card, the External (Internet) adapter and a RAS line. (It could be that the External adapter is represented by a RAS line, eg. ADSL connections - in that case you should have one network adapter and two RAS lines). In case you only see two adapters, you can add another one in the Settings - Advanced - Interface Maintenance.
- Make sure that NAT is enabled on the RAS adapter.

- Go to Settings - Interface table... Select the unused RAS line, click Properties and go to the RAS tab. Select the VPN connection and enter the appropriate username and password. In the Connection section select Persistent. Click OK and then OK again.

- On the New York end:
Go to Settings - Advanced - Port Mapping. Click Add and enter the following:
| Protocol: |
TCP |
| Listen IP: |
Unspecified (can be 63.23.58.47 but is not necessary) |
| Listen port: |
Single port 1723 |
| Destination IP: |
63.23.58.47 |
| Destination port: |
1723 |
| Allow access only from: |
Do not tick (you might wish to restrict access just to 194.20.55.39 - requires defining an address group - see the WinRoute manual on how to do this - we recommend this for security reasons) |
Click OK, then click Add again and enter the following:
| Protocol: |
PPTP |
| Listen IP: |
Unspecified (can be 63.23.58.47 but is not necessary) |
| Destination IP: |
63.23.58.47 |
| Allow access only from: |
Do not tick (again, you might wish to restrict access to 194.20.55.39 only) |
- On the Nice end:
Go to Settings - Advanced - Port Mapping. Click Add and enter the following:
| Protocol: |
TCP |
| Listen IP: |
Unspecified (can be 194.20.55.39 but is not necessary) |
| Listen port: |
Single port 1723 |
| Destination IP: |
194.20.55.39 |
| Destination port: |
1723 |
| Allow access only from: |
Do not tick (you might wish to restrict access just to 63.23.58.47 - requires defining an address group - see the WinRoute manual on how to do this - we recommend this for security reasons) |
Click OK, then click Add again and enter the following:
| Protocol: |
PPTP |
| Listen IP: |
Unspecified (can be 194.20.55.39 but is not necessary) |
| Destination IP: |
194.20.55.39 |
| Allow access only from: |
Do not tick (again, you might wish to restrict access to 63.23.58.47 only) |
- On both ends, in WinRoute open the Debug Log and go to Action - Dial - and select the VPN Line. You should see in the debug log the progress of the connection together with any error messages (should there be any).
- Test the connection from both ends using the "ping" command - open the DOS box on any client machine on the Nice network and enter
ping 10.1.1.1
- If you get a reply, try pinging any other computer in the network (e.g. 10.1.1.15, if such an address exists on the network). The same applies for the other end, just with different addresses.
For detailed instructions on the Server / Client part setup please click here.
|