[Solved]Configure OVPN on Win Server 2008

Ptite-Pomme

Hello everybody,

I'm currently in training course in France, in a small company which is divided in two buildings (250m distance).

I have to connect those two buildings, in order to create an access to the server, from the second building.

In the first building they have Orange as internet provider, and the "Livebox" uses IPSec. In the second building they have Free as internet provider (because Orange was not able to provide a new line)

Free uses OpenVPN with their "Freebox"

Can I configure Windows Server with OpenVPN software, to create a VPN connection between a client in the second building, and the server in the first building?

By the way, I'm a third year IT student in France, and VPN technology is scheduled in the fourth year, so I never used this technology before.

Thanks for time you'll give to me.

Regards,

Quentin.

Ptite-Pomme

The goal is :

Access to Remote Desktop Services on Windows Server 2008, from the client in the second building, in order to use their ERP without having to come in the first building.
It would be time saving.

So, to put it in a nutshell, I need to :

Create a VPN between the two buildings but, I don't know if it possible, because natively, the "Livebox" from Orange uses IPSec, and the "Freebox" from Free natively uses OpenVPN.

I would like to use Windows Server 2008 as a VPN server. (This server is also an AD a DNS, and will be a DHCP)

Is it possible to get rid of the native protocols used by the internet providers' routers?

Traffic

Ptite-Pomme wroteBy the way, I'm a third year IT student in France, and VPN technology is scheduled in the fourth year, so I never used this technology before

Did they teach you to read the documentation yet ?

Please see the Forum rules (top of page)

Ptite-Pomme wroteThanks for time you'll give to me

What exactly is your question ?

Ptite-Pomme

Hi, Traffic,

I saw those rules, but I've written a second post, which was easier to understand, but it seems that it was not accepted by the moderating team.

And, if the documentation helped me, I would not have made a post in the forum.

So I start over :

In the first building is a server running Win Server 2008. They use Remote Desktop Services (RDS) to use their ERP. There is also an internet connection from Orange, Orange's router is natively using IPSec, which I know (thanks to the documentation I've read before creating this topic) is not compatible with OpenVPN.

In the second building is one client, which needs a connection to the ERP, so it needs an access to RDS, on the server. There is an internet connection from Free. Free's router is natively using OpenVPN and can be configured as a VPN client or a VPN server.

So my question is :

Is it possible to configure OpenVPN on Windows Server, to make it a VPN server, in order to provide access to RDS to the client in the second building, and to get rid of the Orange's router's IPSec.

So in other words, can a router route the OpenVPN packets if it doesn't support natively OpenVPN?

Thanks.

maikcat

Guys please calm down...

but it seems that it was not accepted by the moderating team.

your first 2 posts await for mod approval (antispam measure),just now i saw them and approved them.

Is it possible to configure OpenVPN on Windows Server, to make it a VPN server, in order to provide access to RDS to the client in the second building, and to get rid of the Orange's router's IPSec.

yes

So in other words, can a router route the OpenVPN packets if it doesn't support natively OpenVPN?

openvpn simply uses a single port/proto combo,
you will need both endpoints to use openvpn binary though.

Michael.

Ptite-Pomme

Thank you Michael 🙂

I knew that it was awaiting, nothing in my second post would have made it denied.

So I can use OpenVPN on the WinServer as OpenVPN Server, and configure the client to access the VPN.

Great!

Now I have to try to do that! (and eventually manage, it could be great)

In fact, the routers will just forward the packet, no matter which VPN protocol I use?

maikcat

In fact, the routers will just forward the packet, no matter which VPN protocol I use?

you will use openvpn which is a TLS/SSL based vpn,

ipsec f.e does not work that way...

Michael.

Ptite-Pomme

Ok, thank you!

I'll see what I can do 🙂

I hope I'll manage to handle OpenVPN quickly!

Ptite-Pomme

I've made some researches, and some say that the Livebox and the Freebox have to be in "bridge" to forward VPN based traffic, and that I'll have to use two routers able to handle OpenVPN.

Considering that I cannot configure the Livebox as a bridge, it won't work, right?

maikcat

openvpn uses a single proto/port combo and works behind NAT.

Michael.

Traffic

@ Ptite-Pomme:

Sorry that your first post only showed and I did not have access to your second post and so I did not understand fully your question.

Further:

To setup OpenVPN between the two sites use:

Site 1: Windows Server for your OpenVPN server
Site 2: PC (Windows/linux etc) for your OpenVPN client

The Routers at each site are irrelevant to OpenVPN.

Ptite-Pomme

@ Traffic :

I should have written all in one post, but sometimes I don't find words to explain my problem in English so it comes in small parts 🙂

That's cool if routers are irrelevant, because some say they are, others say they don't...

So I configure OVPN Server on the Windows Server, then OVPN Client on the Windows client.
And with a little bit of configuration on the server role, it should be able to access to RDS, that's right?

Traffic

I can foresee no reason why not .. but of course: Until you try you will not know for sure.

Ptite-Pomme

Ok!

Thanks for your replies!

I'll write if this is possible later! 🙂

And I'll probably write a post on the Livebox Forum, people won't have to search for the answer as long as me ^^

Regards,

Quentin.

Ptite-Pomme

Hello again!

One more question : Maybe you'll find this one stupid but :

Can I run en 32 bit OVPN version on the server, then use en 64bit OVPN version on the client?

maikcat

short answer yes

Michael.

Ptite-Pomme

Yes!

It works! I'll ask my ISP to provide a static IP address, then I'll need to configure Windows Server.

Thank you guys!

(How can I put the topic on SOLVED?)

Traffic

Provided you use up to date versions of OpenVPN CE, all versions should be compatible.

Ptite-Pomme

Hello, I have another question... :oops:

Everything is working, but my company asked me to add a new computer.
How can I add a "user" to the VPN?

I know how to create how many users I want when I'm configuring the VPN, but I don't know if you can add another computer after, without starting over.

Regards,

Quentin.

maikcat

Please start a new thread, i will close this one.

Michael.