Additional Dedicated NIC Required on W2K PDC to Run VPN Server?

From: Meron Lavie (lavie@net2vision.net.il)
Date: 07/08/02 

From: "Meron Lavie" <lavie@net2vision.net.il>
Date: Mon, 8 Jul 2002 21:45:01 +0300

Must I have an additional, dedicated NIC on a W2K Primary Domain Controller
to run a VPN Server? My W2K Server is not the gateway nor does it perform
the firewalling/NATting (I have a Linux box which is the
gateway/firewall/NATter). It accesses the Internet through the Linux
gateway.

I have tried to setup a VPN server. When I chose the option, I got a dialog
saying that since the machine is a domain controller, I must configure RAS.
RAS wouldn't let me choose the single NIC I have because "it is the last
available connection". Say what? Well, I tried assigning two IP addresses to
the card, and that didn't help either. There is also the option of "no
Internet connection", but I assume that wouldn't help. I actually tried it
though and found that my local W2K Pro's on the LAN couldn't browse the
Windows domain.

I give up. What am I doing wrong? Must I have two NIC's? I thought that 2
NIC's are required only if a gateway/firewall/NATting is being performed by
the machine. 

--
TIA
Meron Lavie
lavie@net2vision.net.il
NOTE: THERE IS NO "2" IN MY REAL EMAIL ADDRESS: ANTI-SPAM!!!

Relevant Pages

  • Re: OpenVPN working between client and server only, but not able to access any machines in server su
    ... You never mentioned what the IP is for the default gateway of location ... ping from location 2 machine (I can see vpn server and client can ... interface rathertahn eth interface, do I have to specify interface ...
    (comp.os.linux.networking)
  • Re: Group policy (OU) is not applied to client PC in domain
    ... First check that the domain controller has the proper default gateway ... possible that firewall rules are blocking access to the internet from your ... forward lookup zones and I configured 2 forwarders for the ISP DSN server IP ...
    (microsoft.public.win2000.group_policy)
  • Re: LAN, DMZ, WLAN, RRAS and VPN create Routing issue
    ... gateways, but only one can be the default gateway. ... > server and assigned 192.168.2.1 as DMZ IP. ... > the VPN router to the server's DMZ NIC. ... > the VPN server doesn't know the correct route back to the client. ...
    (microsoft.public.win2000.ras_routing)
  • Re: Trust Relationship Fail Windows 2003
    ...  win2k3 domain controller. ...  the win2k server. ...  you need to add at least one valid gateway. ...  List of NetBt transports currently bound to the Redir ...
    (microsoft.public.windows.server.active_directory)
  • Re: OpenVPN working between client and server only, but not able to access any machines in server su
    ... I tried to run this that command (route add -net 172.16.2.0 netmask ... You never mentioned what the IP is for the default gateway of location 1, so I could hardly include it in my post. ... But ordinarily speaking, openvpn should take care of that as long as you make sure traffic for the remote network gets routed to the VPN server machine, and the VPN box itself has IP routing enabled. ... interface rathertahn eth interface, do I have to specify interface ...
    (comp.os.linux.networking)