Two boxes, same IP

blubomber · August 20th, 2002, 03:51 PM

I want to get a VPN box setup so that people can get outside access to the network. I already have the box but my company will no pay the extra $5 a month for a second IP address lease from our DSL provider. So, i was wondering if i can setup my VPN box in parallel with my router/firewall using the same outside IP address and a different inside IP address?

The router is handling our incoming Exchange mail plus OWA and uses NAT. So i want to know if it is possible or if i am going to loose data because it does not know where to go.

Thank you for any guidance and enlightenment.

vass0922 · August 20th, 2002, 04:00 PM

Umm if you're using a firewall why can't you just forward the VPN ports to the VPN box, and forward X.400/web ports to the mail/web server?

One external IP (the router/firewall) and you're using NAT so internal IP's really dont' matter.

DVNT1 · August 20th, 2002, 06:11 PM

No, the public IP address must be different.

NAT may work for you but be aware that not all VPN solutions work over NAT.

Undeadlord · August 20th, 2002, 06:14 PM

I am alittle confused? You went through all the trouble of setting up a VPN box, but your company won't shell out 5 bucks a month, aka 60 a year to get a static ip? How messed up is that. I would tell them it cannot be done without the second IP.

Undeadlord

blubomber · August 20th, 2002, 07:29 PM

Thanks for the replies.

I figured i would need two public IPs, i just needed to confirm that. I am currently trying to setup VPN with my current router using NAT to get through the router to my RAS server but i am running into some resistance. I wanted to get VPN setup this way so that i can show the big wigs what they are missing out on and then hopefully get the second public IP.

Oh well, my struggle to keep my company somewhat up to speed with current trends continues.

newbie~wan · August 30th, 2002, 05:55 PM

Quote:

Originally posted by blubomber

Oh well, my struggle to keep my company somewhat up to speed with current trends continues.

With the way you phrased that, I must beg the question; has remote access been repeatedly requested by your users or is this just a pet project of yours, something to "keep your company (read: you) somewhat up to speed"? I know how work can get monotonous and boring, but unless your users really need remote access, don't open up your company's network anymore than you have to. Services that aren't running cant possibly be exploited.