Koozali.org: home of the SME Server

Once a VPN is established

Offline asterof

  • *
  • 37
  • +0/-0
Once a VPN is established
« on: May 23, 2007, 04:47:51 PM »
Might sound silly but
How do you connect and run SSH once the VPN has been established ?
Or am I confused
Im am trying to run a shell from a windows XP machine

Offline skydivers

  • *
  • 178
  • +0/-0
Re: Once a VPN is established
« Reply #1 on: May 23, 2007, 04:59:39 PM »
Quote from: "asterof"
Might sound silly but
How do you connect and run SSH once the VPN has been established ?
Or am I confused
Im am trying to run a shell from a windows XP machine


You can use putty to establish this. But are you sure what you are doing? With VPN you access from a remote location your local network. I use ssh also this way.

It's also possible to connect directly with ssh to your server (and putty) port 22 needs to be open...

Offline asterof

  • *
  • 37
  • +0/-0
mapped drive
« Reply #2 on: May 23, 2007, 07:52:51 PM »
the idea was to access a directory as a mapped drive
located on the server

sanchotai

Once a VPN is established
« Reply #3 on: May 23, 2007, 09:03:11 PM »
Im not sure you will need ssh if your are VPN'ing into your machine and simply want to map a shared directory.

I'd try the following:

First when you are on the LAN (ie not remote VPN) see if you can see the share you want on the sme server and make sure you can map a drive letter to it and access files etc.

Then, when logged in remotely via VPN try opening an explorer window (ie file explorer not internet explorer) and in the address bar type in "\\192.168.1.1" where you replace the ip in my example with the lan ip of the sme box. If you are vpn'd in you should be able to access the sme box by its lan ip - you can check by pinging that address.

if this works you should see the samba shares (ie ibays, hoem directory) pop in in explorer - you can then map a drive letter to this.

Once you have got it working, you should be able to use a script on your xp box - something like:

"net use z: \\192.168.1.1\myshare"

Does this help?

Offline asterof

  • *
  • 37
  • +0/-0
VPN established
« Reply #4 on: May 23, 2007, 10:19:38 PM »
I can share and access and map drives from a local machine
Server is not behind a firewall
I can ping the server
The VPN shows connected
I can ftp files
but when I do a \\208.127.71.14 I get no connection

Offline pfloor

  • ****
  • 889
  • +1/-0
Re: VPN established
« Reply #5 on: May 23, 2007, 10:36:46 PM »
Quote from: "asterof"
I can share and access and map drives from a local machine
Server is not behind a firewall
I can ping the server
The VPN shows connected
I can ftp files
but when I do a \\208.127.71.14 I get no connection

You need to use your internal IP address and not the external one.
In life, you must either "Push, Pull or Get out of the way!"

Offline asterof

  • *
  • 37
  • +0/-0
now im confused
« Reply #6 on: May 23, 2007, 10:48:23 PM »
My server has two nic's
One on my internal lan
One on my external lan
the external is connected to the internet
the internal is behind a firewall
the external is 208.127.71.14
so explain that statement please

Offline pfloor

  • ****
  • 889
  • +1/-0
Re: now im confused
« Reply #7 on: May 23, 2007, 10:56:15 PM »
Quote from: "asterof"
My server has two nic's
One on my internal lan
One on my external lan
the external is connected to the internet
the internal is behind a firewall
the external is 208.127.71.14
so explain that statement please

What is the IP address of your internal nic?

What does "the internal is behind a firewall" mean.  Your SME server is a firewall, do you have an additional firewall installed?
In life, you must either "Push, Pull or Get out of the way!"

Offline asterof

  • *
  • 37
  • +0/-0
Let me see if I can explain
« Reply #8 on: May 24, 2007, 04:46:22 AM »
I have a internal LAN  10.10.26.1 - 255
The IP's are assigned by my router
All my computers are connect to that Router including one of the NIC's
on the SME. It uses a static address.

I also have six static IP address's in the INTERNET world
I have the router connected to the INTERNET using 208.127.71.12
I also have the second NIC on the SME server
connected to the INTERNET with a static
IP of 208.127.71.14

Reason? I have a domain registered to that IP
so email, file access, and web access from the internet
is a lot easier to set up and maintain

So all my computers are behind a router/firewall
with easy local access to my server files
and I have easy access to the INTERNET side of the SME server
except I can seem to get ftp set up correctly the way I want it
as well as VPN

Offline girkers

  • *
  • 296
  • +0/-0
    • gk computer services
Once a VPN is established
« Reply #9 on: May 24, 2007, 07:12:48 AM »
When you establish a VPN connection what you are doing in fact is becoming a part of you LAN. That means all ip addressing becomes local.

If for example you access your server using \\10.10.26.10 when on the LAN, once you establish the VPN you access it using exactly the IP address.

Offline skydivers

  • *
  • 178
  • +0/-0
Re: Let me see if I can explain
« Reply #10 on: May 24, 2007, 08:27:40 AM »
Quote from: "asterof"
I have a internal LAN  10.10.26.1 - 255
The IP's are assigned by my router
All my computers are connect to that Router including one of the NIC's
on the SME. It uses a static address.

I also have six static IP address's in the INTERNET world
I have the router connected to the INTERNET using 208.127.71.12
I also have the second NIC on the SME server
connected to the INTERNET with a static
IP of 208.127.71.14

Reason? I have a domain registered to that IP
so email, file access, and web access from the internet
is a lot easier to set up and maintain

So all my computers are behind a router/firewall
with easy local access to my server files
and I have easy access to the INTERNET side of the SME server
except I can seem to get ftp set up correctly the way I want it
as well as VPN


What kind of a configuration do you have???

Do you have 2 internet connections? Why is your SME connected to the router if it is in front of the router? Why do you use a router?

If your SME is behind the router it should be in the same range (or do you use DMZ?).

Offline asterof

  • *
  • 37
  • +0/-0
I explained all that in lasr post
« Reply #11 on: May 24, 2007, 05:05:02 PM »
QUOTE"
What kind of a configuration do you have???

Do you have 2 internet connections? Why is your SME connected to the router if it is in front of the router? Why do you use a router?

If your SME is behind the router it should be in the same range (or do you use DMZ?).QUOTE"

I explained all that above

Offline asterof

  • *
  • 37
  • +0/-0
Back to the origioanl question
« Reply #12 on: May 24, 2007, 05:16:53 PM »
I am setting on a LAN right now with DHCP address's of
10.10.26.0 - 255

My home Lan behind my firewall is also 10.10.26.0 - 255
DHCP assigned by my router

My SME server has an internel address of 10.10.26.100 Static
My SME server has an external address of 208.127.71.12
All Internet web access gets to the SME server using 208.127.71.12
Your saying when I connect to the server using VPN pointed to 208.127.71.12, that at that point I need to map to 10.10.26.100
However if im already on a LAN that is using 10.10.26.0 - 255
the local system I am on is gonna look for a local address of 10.10.26.100  not go out the VPN to look for it. Now does this machine I a on need to be part of my home local workgroup??

Now your gonna ask, why have the SME outside and inside the router/firewall ?
Think about it....
With the SME outside, it is a lot easier to configure for all web activities
With the SME inside it is a lot easier to configure for Local LAN file sharing

Offline pfloor

  • ****
  • 889
  • +1/-0
Once a VPN is established
« Reply #13 on: May 24, 2007, 05:21:50 PM »
So if I understand you correctly, your setup is something like this?
Code: [Select]

         /208.127.71.12>Router----\
Internet<                          >10.10.26.xxx Internal Network
         \208.127.71.14>SME Server/
In life, you must either "Push, Pull or Get out of the way!"

Offline pfloor

  • ****
  • 889
  • +1/-0
Once a VPN is established
« Reply #14 on: May 24, 2007, 05:27:00 PM »
When you VPN into your server from outside, that machine becomes part of the local network (that is what a "Virtual Private Network" is).  Your remote machine will accuire an IP in the 10.10.26.xxx range and become a local machine and act just like any other connected to the local network.

You may however run into a small problem if your local network is getting DHCP from the router instead of the SME Server.

What are you using for your internal DHCP server, SME or the router?
In life, you must either "Push, Pull or Get out of the way!"