Google Answers Logo
View Question
 
Q: VPN IP ( No Answer,   3 Comments )
Question  
Subject: VPN IP
Category: Computers > Security
Asked by: dobchek-ga
List Price: $4.00
Posted: 19 Feb 2005 14:14 PST
Expires: 21 Mar 2005 14:14 PST
Question ID: 477224
I have VPN client (checkpoint) to connect to my company netwrok.  the
company has site-to-site VPN with other locations, and in order for me
to connect to these location, I need to get the site-to-site trusted
IP, and not my ISP IP [the real IP, should be the trusted IP].  How
can I configure my VPN client (or the VPN at my company) to ignore my
real IP from the ISP?
Answer  
There is no answer at this time.

Comments  
Subject: Re: VPN IP
From: barnacle_bill-ga on 28 Feb 2005 07:58 PST
 
Please correct me if I am wrong but you seem to be asking
"I need my remote connection VPN to obtain a company (internal) IP
address in order to access the other sites connected through VPN"

If this is the case then you will probably need a router with NAT, it
will allocate an IP address to any VPN connections based on the DHCP
setup.

When connected to the network through the VPN can you ping the other
computers over the other VPN - by name and by IP address?

BB
Subject: Re: VPN IP
From: dainkenkind-ga on 16 Mar 2005 12:30 PST
 
When your VPN client connects, it will pull an IP address from
whatever pool your administrator has configured you to pull from, this
may be your companies DHCP pool, or a seperate pool reserved for VPN
connections.  Either way, if you are connected, you will be receiving
another IP besides the one your ISP gives you.  You do not need a
router with NAT, in fact if you are going through a router on your
local side, you want to make sure that it has PPTP or IPSec
passthrough turned on.  Once you have connected with your VPN client,
you should be able to do an IPCONFIG /ALL from the command prompt to
see your new VPN IP address.  If it is not an IP that is allowed to
traverse the network to the remote sites, then you will have to have
the administrator either add the address pool from which you received
your address to the list of addresses that are allowed across the VPN
links, or have them set the VPN DHCP pool to be addresses that are
already allowed across the links.

You don't want your client to ignore the IP address from your ISP, it
is the IP address that is communicating with the external interface of
your companies firewall, router, VPN concentrator, etc...  The address
you receive after the tunnel is setup is used solely for traffic
across the tunnel, unless it is set as your default gateway, in which
case all traffic heading to a network to which you are not directly
connected to will also be directed to the tunnel (ie. internet
traffic)  Basically, you need the address your ISP gave you to route
between your computer and your company, the VPN 'tunnels' on top of
that existing connection.
Subject: Re: VPN IP
From: barnacle_bill-ga on 17 Mar 2005 01:24 PST
 
Network Address Translation will take the ISP allocated IP address and
translate it into an internal IP address, allocated by the DHCP or
other IP address allocator.  This is not from the client side, it is
done at the companys VPN connection, in fact generally after the VPN
connection has connected.  Port Address Translation is somewhat
different, allocating external port address to internal IP's depending
on function, thus allowing several internal IP addresses to
effectively use one external IP address.

BB

PS - Sorry if I confused before, where I said, "you will probably need
a router with NAT" 'you' should have been read as 'the company'.  Also
you say that this the current VPN configuration is 'site to site',
does that mean this is a permanent connection between two or more
LANS?

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy