This topic has been archived. It cannot be replied.
-
工作学习 / IT技术讨论 / 请问有关VPN的问题VPN客户端|---->|router|---->WAN---->|VPN服务器(PPTPD)
这样的配置可能实现VPN拨入么？恳请赐教，谢谢！
-daydayupy(dduy);
2005-2-24
{102}
(#2143963@0)
-
为什么不能？//我不是专家
-x888(做好国人，上班不唰网);
2005-2-24
(#2143965@0)
-
Some old models of routers will not allow it.
-laoyou(老游);
2005-2-24
(#2143973@0)
-
I tried and did not get any luck with this config. Maybe it's because of the reason that you said. Could you talk about why some old models not allow it and how to config. Thanks!
-daydayupy(dduy);
2005-2-24
(#2144063@0)
-
If the router does not support it, you can do nothing with the config. The easiest solution will be getting a new router.
-laoyou(老游);
2005-2-24
(#2144087@0)
-
Actually I wanted to connect from office to VPN server at my home. Looks like it's impossible now. :( Thanks anyway.
-daydayupy(dduy);
2005-2-24
(#2144138@0)
-
Actually, it's not impossible.A lot more information will be needed before I say it's possible or not.
-laoyou(老游);
2005-2-24
{73}
(#2144198@0)
-
Could you let me know what kind of info do you need. I'm willing to have a try though I don't know much about network/routing stuff. Thanks.
-daydayupy(dduy);
2005-2-25
(#2145186@0)
-
Can you please tell me how much you'd like to pay for somebody to do that for you?Then I'll know how important it is to you. :)
-laoyou(老游);
2005-2-26
{46}
(#2148356@0)
-
You did not say you are going to charge in your last message. So I'd like to pay nothing.
-daydayupy(dduy);
2005-2-27
(#2148677@0)
-
VPN客户端|---->|router|---->WAN---->|VPN服务器(PPTPD)
这里如果router是你家用的一般没问题。比如你家里用router上网，连接公司的VPN服务器，完全可以。但如果你是从公司连接家里，90%是不可以的。VPN连接要求你的客户端有一个IP。你从家连接公司的情况时，家用的router大都用NAT的方式，所以没有问题。但你从公司到家，公司配置一般都是proxy的方式。所以你的VPN请求回不来。除非你和你们公司的admin很熟，让他给你在router上设一个nat的rule，就可以了。
-johnnyhatesjazz(Rock and Roll);
2005-2-25
{240}
(#2145201@0)
-
How do I know whether it's proxy or nat? I feel like it's nat in our company.
-daydayupy(dduy);
2005-2-25
(#2145288@0)
-
That is not true. As long as there is a hole everything can be done through the hole. HTTP and FTP are open in most of companies, which are holes and can be used to set up tunnels.Not mention that IP layer is wide open. I did many times.
-cerboros(Once Upon Great King);
2005-2-27
{57}
(#2148758@0)
-
Sounds more and more complicated. Could you give me some clue, like any docs to read? Thank you.
-daydayupy(dduy);
2005-2-28
(#2150097@0)
-
WAN里面你要经过无数的router, 那么VPN就无从谈起啦? 不可能嘛, 肯定是你家router的问题.
-workopolis(workaholic);
2005-2-24
(#2144092@0)
-
有道理
-daydayupy(dduy);
2005-2-24
(#2144140@0)
-
The PPTP/GRE port are usually blocked. To break it through, you can use IP security to set up a tunnel between your company machine and any computer in the world.The current Firewall/Proxy only works at TCP/UDP layer. The layer 2 is wide open. You can transport everything from your company computer to outside once a tunnel is estalished.
-cerboros(Once Upon Great King);
2005-2-24
{177}
(#2144219@0)
-
Really! Myabe I should try it out. I'll look into it. Thanks, buddy!
-daydayupy(dduy);
2005-2-25
(#2145192@0)
-
how come L3 blocked while you could set up a L2 tunnel1. make sure what kind of NAT/Porxy your company is using.
2.try socks proxy or IPsec
-wolves(鱼儿爸);
2005-2-25
{86}
(#2145631@0)
-
UP! VPN server(IPsec/L2TP)可以在Router(NAT)后面么？
-daydayupy(dduy);
2005-2-28
(#2150292@0)
-
yes,you can do it with NAT,but not PAT or NAT overloading
-wolves(鱼儿爸);
2005-3-1
(#2151837@0)
-
I see. Thank you.
-daydayupy(dduy);
2005-3-1
(#2152141@0)