Home All Groups Group Topic Archive Search About

[beginner] Connecting XP into 2 LAN

Author
16 Nov 2006 1:57 PM
Francesco
Hi all,
I have the following problem: We have a VPN client which connects to
another LAN with IPSec.
Meanwhile it's connected I need to give access to shared directories to
other Pc in the LAN.

So I decided to buy another ethernet card and installed it on the XP
Box.

What I would like to do is :

[ LAN ]----Tcp/IP------> [ XP Box sp 2 ] ------IPSec-----> [VPN]

Unfortunately when I connect to the VPN my LAN is not visible anymore.
I have tried to bridge connections, from the Network Control Panel but
as soon as I do it the VPN client disconnects because of security
threat.

I understand that there are some security constraints because of them
the VPN could be exposed to a remote LAN, but I just need that my XP
Box can both --access vpn--, and --be reachable from the LAN--.

Is it possible to do it?
Thanks a lot
Francesco

Author
16 Nov 2006 3:36 PM
Robert L [MVP - Networking]
Assuming you want to have IPSec connecting to a remote site while the same computer connecting to another computer in the LAN, you don't need two NICs. Post the result of ipconfig /all here may help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
  "Francesco" <f.marchi***@pride.it> wrote in message news:1163685475.881746.93200@b28g2000cwb.googlegroups.com...
  Hi all,
  I have the following problem: We have a VPN client which connects to
  another LAN with IPSec.
  Meanwhile it's connected I need to give access to shared directories to
  other Pc in the LAN.

  So I decided to buy another ethernet card and installed it on the XP
  Box.

  What I would like to do is :

  [ LAN ]----Tcp/IP------> [ XP Box sp 2 ] ------IPSec-----> [VPN]

  Unfortunately when I connect to the VPN my LAN is not visible anymore.
  I have tried to bridge connections, from the Network Control Panel but
  as soon as I do it the VPN client disconnects because of security
  threat.

  I understand that there are some security constraints because of them
  the VPN could be exposed to a remote LAN, but I just need that my XP
  Box can both --access vpn--, and --be reachable from the LAN--.

  Is it possible to do it?
  Thanks a lot
  Francesco
Author
17 Nov 2006 10:14 AM
Francesco
Hi Robert, thanks for your reply. I have cut and paste the ipconfig
/all before and after connecting to vpn.
I have cancelled only the public dns address of our company for
security reasons.
Here it is: hope you can give me a clue. Thanks again
Francesco

======== BEFORE CONNECTING TO VPN ======================

        Host name . . . . . . . . . . . . . . : xxxxxxxxxx
        Suffisso DNS primario  . . . . . . .  :
        Tipo nodo . . . . . . . . . . . . . .  : Ibrido
        Routing IP enabled. . . . . . . . . : No
        Proxy WINS enabled . . . . . . . .  : No
        Elenco di ricerca suffissi DNS. . . . : xxx.xxx.it
                                            xxx.xxx.it
Ethernet card for (LAN):

        Suffisso DNS specifico per connessione:
        Descrizione . . . . . . . . . . . . . : Intel(R) PRO/100 VE
Network Conn
ection
        Hardware address. . . . . . . . . . . : 00-0F-FE-06-C1-18
        DHCP enabled. . . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . . : 10.2.24.31
        Subnet mask . . . . . . . . . . . . . : 255.255.0.0
        Gateway predefinito . . . . . . . . . : 10.2.1.1
        Server DNS . . . . . . . . . . . . .  : 10.2.1.2
                                                       10.2.1.5
        Server WINS primario . . . . . . . .  : 10.2.1.5
        Server WINS secondario . . . . . . .  : 10.2.1.2

Ethernet card for (LAN) 3:

        Suffisso DNS specifico per connessione: xxx.xxx.it
        Descrizione . . . . . . . . . . . . . : D-Link DFE-528TX PCI
Adapter
        Hardware address. . . . . . . . . . . : 00-15-E9-F1-86-BF
        DHCP enabled. . . . . . . . . . . . : yes
        Configurazione automatica abilitata   : yes
        IP Address. . . . . . . . . . . . . : 10.2.21.250
        Subnet mask . . . . . . . . . . . . . : 255.255.0.0
        Gateway predefinito . . . . . . . . . : 10.2.1.1
        Server DHCP . . . . . . . . . . . . . : 10.2.1.2
        Server DNS . . . . . . . . . . . . .  : 10.2.1.5
                                            10.2.1.2
        Server WINS primario . . . . . . . .  : 10.2.1.2
        Server WINS secondario . . . . . . .  : 10.2.1.5
        Lease ottenuto. . . . . . . . . . . . : venerdì 17 novembre
2006 2.34.30

        lease expiry . . . . . . . . . . .  : lunedì 27 novembre 2006
2.34.30





======= WHEN CONNECTION TO VPN IS ESTABLISHED =====================

Configurazione IP di Windows

        Host name . . . . . . . . . . . . . . : xxxxxxxxx
        Suffisso DNS primario  . . . . . . .  :
        Tipo nodo . . . . . . . . . . . . . .  : Ibrido
        Routing IP enabled. . . . . . . . . : No
        Proxy WINS enabled . . . . . . . .  : No
        Elenco di ricerca suffissi DNS. . . . : xxx.xxx.it
                                            xxx.xxx.it

Ethernet card for (LAN):

        Suffisso DNS specifico per connessione:
        Descrizione . . . . . . . . . . . . . : Intel(R) PRO/100 VE
Network Con
ection
        Hardware address. . . . . . . . . . . : 00-0F-FE-06-C1-18
        DHCP enabled. . . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . . : 10.2.24.31
        Subnet mask . . . . . . . . . . . . . : 255.255.0.0
        Gateway predefinito . . . . . . . . . : 10.2.1.1
        Server DNS . . . . . . . . . . . . .  : 10.2.1.2
                                            10.2.1.5
        Server WINS primario . . . . . . . .  : 10.2.1.5
        Server WINS secondario . . . . . . .  : 10.2.1.2

Ethernet card for (LAN) 3:

        Suffisso DNS specifico per connessione: xxx.xxx.it
        Descrizione . . . . . . . . . . . . . : D-Link DFE-528TX PCI
Adapter
        Hardware address. . . . . . . . . . . : 00-15-E9-F1-86-BF
        DHCP enabled. . . . . . . . . . . . : yes
        Configurazione automatica abilitata   : yes
        IP Address. . . . . . . . . . . . . : 10.2.21.250
        Subnet mask . . . . . . . . . . . . . : 255.255.0.0
        Gateway predefinito . . . . . . . . . : 10.2.1.1
        Server DHCP . . . . . . . . . . . . . : 10.2.1.2
        Server DNS . . . . . . . . . . . . .  : 10.2.1.5
                                            10.2.1.2
        Server WINS primario . . . . . . . .  : 10.2.1.2
        Server WINS secondario . . . . . . .  : 10.2.1.5
        Lease ottenuto. . . . . . . . . . . . : venerdì 17 novembre
2006 2.34.3

        lease expiry . . . . . . . . . . .  : lunedì 27 novembre 2006
2.34.30

Ethernet card for (LAN) 2:

        Suffisso DNS specifico per connessione:
        Descrizione . . . . . . . . . . . . . : Cisco Systems VPN
Adapter
        Hardware address. . . . . . . . . . . : 00-05-9A-3C-78-00
        DHCP enabled. . . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . . : 10.239.26.245
        Subnet mask . . . . . . . . . . . . . : 255.0.0.0
        Gateway predefinito . . . . . . . . . : 10.239.26.245
        Server DNS . . . . . . . . . . . . .  : 156.54.17.165
                                            156.54.17.167










Robert L [MVP - Networking] ha scritto:

Show quoteHide quote
> Assuming you want to have IPSec connecting to a remote site while the same computer connecting to another computer in the LAN, you don't need two NICs. Post the result of ipconfig /all here may help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
>   "Francesco" <f.marchi***@pride.it> wrote in message news:1163685475.881746.93200@b28g2000cwb.googlegroups.com...
>   Hi all,
>   I have the following problem: We have a VPN client which connects to
>   another LAN with IPSec.
>   Meanwhile it's connected I need to give access to shared directories to
>   other Pc in the LAN.
>
>   So I decided to buy another ethernet card and installed it on the XP
>   Box.
>
>   What I would like to do is :
>
>   [ LAN ]----Tcp/IP------> [ XP Box sp 2 ] ------IPSec-----> [VPN]
>
>   Unfortunately when I connect to the VPN my LAN is not visible anymore.
>   I have tried to bridge connections, from the Network Control Panel but
>   as soon as I do it the VPN client disconnects because of security
>   threat.
>
>   I understand that there are some security constraints because of them
>   the VPN could be exposed to a remote LAN, but I just need that my XP
>   Box can both --access vpn--, and --be reachable from the LAN--.
>
>   Is it possible to do it?
>   Thanks a lot
>   Francesco
>
> ------=_NextPart_000_002B_01C70962.BC303770
> Content-Type: text/html; charset=iso-8859-1
> Content-Transfer-Encoding: quoted-printable
> X-Google-AttachSize: 2251
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML><HEAD>
> <META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
> <META content="MSHTML 6.00.2900.2963" name=GENERATOR>
> <STYLE></STYLE>
> </HEAD>
> <BODY bgColor=#ffffff>
> <DIV>Assuming you want to have IPSec connecting to a remote site while the same
> computer connecting to another computer in the LAN, you don't need two NICs.
> Post the result of ipconfig /all here may help.</DIV>
> <DIV><BR>Bob Lin, MS-MVP, MCSE &amp; CNE<BR>Networking, Internet, Routing, VPN
> Troubleshooting on <A
> href="http://www.ChicagoTech.net">http://www.ChicagoTech.net</A> <BR>How to
> Setup Windows, Network, VPN &amp; Remote Access on <A
> href="http://www.HowToNetworking.com">http://www.HowToNetworking.com</A> </DIV>
> <BLOCKQUOTE
> style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
>   <DIV>"Francesco" &lt;<A
>   href="mailto:f.marchi***@pride.it">f.marchi***@pride.it</A>&gt; wrote in
>   message <A
>   href="news:1163685475.881746.93***@b28g2000cwb.googlegroups.com">news:1163685475.881746.93200@b28g2000cwb.googlegroups.com</A>...</DIV>Hi
>   all,<BR>I have the following problem: We have a VPN client which connects
>   to<BR>another LAN with IPSec.<BR>Meanwhile it's connected I need to give
>   access to shared directories to<BR>other Pc in the LAN.<BR><BR>So I decided to
>   buy another ethernet card and installed it on the XP<BR>Box.<BR><BR>What I
>   would like to do is :<BR><BR>[ LAN ]----Tcp/IP------&gt; [ XP Box sp 2 ]
>   ------IPSec-----&gt; [VPN]<BR><BR>Unfortunately when I connect to the VPN my
>   LAN is not visible anymore.<BR>I have tried to bridge connections, from the
>   Network Control Panel but<BR>as soon as I do it the VPN client disconnects
>   because of security<BR>threat.<BR><BR>I understand that there are some
>   security constraints because of them<BR>the VPN could be exposed to a remote
>   LAN, but I just need that my XP<BR>Box can both --access vpn--, and --be
>   reachable from the LAN--.<BR><BR>Is it possible to do it?<BR>Thanks a
>   lot<BR>Francesco<BR></BLOCKQUOTE></BODY></HTML>
>
> ------=_NextPart_000_002B_01C70962.BC303770--