OK
From the top
THIS APPLIES ONLY TO THE LAPTOP CLIENT TO FIREWALL VPN FROM A DUN CONNECTION, NOTHING ELSE
(You say you can make a connection, presumably you get messages that it has all authenticated OK?)
Yes, I am authenticated OK I can ping all of the office LAN, access files, server shares etc... Everything is as it should be on this connection. The client software logs agree as does the client monitor.
(The user name you are accessing the office network on has full remote access rights?)
Yes, the user name has full local machine admin rights and is a member of every domain admin group that exists (a bit over the top, but i tried it to be on the safe side. The client machine has rights to be a member of the domain and so on.
(Is the server fully patched?)
Not sure - I don't think so but that doesn't cause a problem because the DUN VPN works - authentication is not an issue because the authentication is taken care of by the shared secret being in place on the client software on the laptop and on the office firewall.
(If you are authenticated, does an IPConfig/All command (using the dos command prompt) give any odd messages?
Can you ping any part of the network by specific IP address, or even the computer names, when you are authenticated.)
Nope, everything is A OK. Yes I can ping fine, cannot use names as I haven't done the LMHosts file yet, I'll get to that when I can get it all working OK.
(Does anything happen if at your windows Run command you type the line "\\servername" ?)
Yup, the server runs what it should do when I do that - a stock system on IIS.
(Do you have any software firewall running on your local PC or the server, as well as on the 3-com things?)
No, I went for hardware firewalls over software ones- I am a bit paranoid when it comes to security, have managed never (touch wood) to get hacked or infected in the office since I set up the network 5 years ago.
(Presumably you have followed 3-com's guidance as to how to set up their the firewall router things to speak to each other over VPN?)
I have a few trees worth of pdf's fault finding, knowledge base articles, google groups search results blah, blah, blah...................................
Tried all of them to no avail. Every thing that I have read says that what I have done is correct and that I should not be having any problems. The whole reason that I decided to use the Firewalls to do the VPN thing is that I didn't need the hastle of setting up RAS, VPN and Radius on my server. It was supposed to be easy, honest!!
I can just about handle the laptop only connecting on a DUN but my problem is that I cannot even get the two firewalls to talk. I am getting NOTHING on the office one when I initiate the IKE on the house one. The house log shows initiation and the office log shows nothing.
The logs are on the physical firewalls so it is not a data transfer thing. All of my logons have full admin rights on everything (not the done thing but it works for me).
I am thinking that it appears to be something to do with the packets not having the correct source IP address on them because of the proxy. The ISP that I use for a DUN connection is PlusNet and they do not use web caching and I do not have any problems.
Any thoughts?
(I am beginning to think I am going to have to pay a VERY serious amount of money to get this set up as the only people that I can come up with that SHOULD know what to do are a company called Consilium, and that's going to cost me at least a thousand or two.)
Which is NOT what I want to be doing
