Vpn Connection For A Mobile User That Travel To A Client Site

[zillah]

Hi

I am looking to configure TheGreenBow VPN client (installed on his laptop) for a user that travels form one client site to another client site and he is using has his laptop (XP SP3) .

Would the user be able to connect to his office via VPN from any of those clients sites ( they have broadband connection) if he used his laptop ?

As you know I am not allowed to touch clients’ routers to configure necessary port forwarding for to the user’s laptop

Thanks

[phazey]

Should be as long as the correct ports are opened on the clients routers to allow the vpn connection.

[zillah]

Should be as long as the correct ports are opened on the clients routers to allow the vpn connection.

Which port do u think should be enabled on the client router to allow IPSec connection for the user laptop ?

[Prasert]

Should be as long as the correct ports are opened on the clients routers to allow the vpn connection.

Which port do u think should be enabled on the client router to allow IPSec connection for the user laptop ?

If the transport basis for the VPN is PPTP, udp port 1723 needs to be open.

If the transport basis for the VPN is L2TP, udp port 1701 needs to be open.

IPSEC is an encryption protocol and doesn't use port numbers, but protocol numbers.

GRE: protocol 47, ESP:protocol 50 and AH: protocol 51. These protocol numbers will usually be open, as simple home/office routers are not capable of restricting these.

There's no need to configure portforwarding, as all sessions are initiated by the client pc and will thus travel without problems through NAT.

[zillah]

There's no need to configure portforwarding, as all sessions are initiated by the client pc and will thus travel without problems through NAT.

Yes that is right I did test and it worked

Thanks for that.

My second question the private ip address for the user's office (work) is 192.168.0.0/24 (means his work server is 192.168.0.50 and his Desktop PC is 192.168.0.10,,,,,,etc) and his gateway (router 192.168.0.1) at work configured for VPN IPSec and it has been configured to assign a private ip address to the laptop's VPN client (TheGreenBow) of 172.17.0.23/16.

What if the client's site where the user travels has the same private ip address as the user's office ?

Now when the user connected via VPN to his office and if he pings 192.168.0.50 (his server at work) this ip might same address to one of a desktop at client's site !!!!

Thanks