JamesLevinworth
@embarqhsd.net
| reply to fms007
Re: VPN Connection
Hey to ya.
said by fms007  :Facing the same problem with loading of router settings page That's too bad. We'll troubleshoot this shortly.
said by fms007 :Also wanted to bring out a point here...before i started this post....i tried a program called Teamviewer (remote access).... with this program i was able to access from CLIENT--> SERVER and from SERVER-->CLIENT.....this was via internet.....had to install the Teamviewer program on both PC for that.....dont know, maybe here there is no loopback being used? Teamviewer generates some kind of ID and password...or if one is using Teamviewer as a windows system program one can fix the username and password...but in any case there is Ips to configure no port forwarding in router...maybe that's the reason why there is no loopback issue as it uses the Teamviewer server for remote access. » www.teamviewer.com/download/index.aspxLogMeIN Account Free (1.)Similarly was able to create a free LogMeIn account through which i was able to setup Client in this LogMeIn account.. (2.)Than going to the SERVER was able to setup the SERVER also on the LogMein account... (3.)Than going back to CLIENT and on opening the LogMeIn account was able to remote access(get the remote desktop of ) SERVER on Client via webrowser. » https:// secure.logmein.com/welcome/get_l···orks.asp Using an alternate way to remote or VPN into your network was going to be my next suggestion going back to when you first posted.... knowing you may have ended up wanting or needing to using another method than RDP and/or PPTP. But, we needed to fix the other issues first before even going there. The testing we did yesterday while trying to figure out the blockage, also served the purpose of checking off what works in your environment.... so it served a valuable purpose anyway in this regard and considering you did reconfigure your networking, you got bridges going on, the whole using the usb and ethernet at the same time in your modem thing, etc.
We should get those other knots figured out before we moved ahead... but I am glad you do think ahead. Your initiative and willingness to learn makes it pleasurable to work with you.  It's also good that you work through each of these things carefully and patiently. That's a good trait.. especially learning about and doing tech stuff. Too many people get anxious and jump ahead not knowing what the heck their doing or why just to find the path of least resistance.. Never learning anything and breaking other stuff along the way. It ends up biting themselves, though.
said by fms007 :So my point is are Teamviewer and LogMeIn not using loopback...is it that in both these cases ....m i using their webservers...and that's why there is no loopback here. You're right.. loopback isn't getting in the way for them. Both of those programs, which are VPN solutions, actually use a VPN server in the middle between you and your server to authenticate the session (some people don't like this fact, some don't care....) As that is, that eliminates the looping back because looping back is really talking directly to yourself.
The issue with your modem/router with loopback is that since your communication is coming from the LAN (behind NAT) and wants to go out to the WAN to come back into the LAN, the router says I don't think so. Your router would need to provide the function to filter NAT redirection in order to communicate in that way and many routers do. If you wanted/needed to solve the loopback/NAT redirection issue, you could upgrade your modem/router or get a new one. Your ISP may be able to/decide to upgrade you if you've had it long enough and you called and told them it wasn't working well. Worth a shot. If they provided you with a newer router, you could even end up with one that has much better functionality than you have now. OR, you could do what many people do and go buy the very model you want (maybe one with a built in switch for more ports that you could use) and just put the ISP provided modem in bridge mode, and attach yours to it.
What's your thoughts on all this? |
|
fms007
join:2009-05-24
| Oh.....what we did yesterday was not only necessary....but it was very informative for me
I have been searching on different forums for somebody who would have not only sound knowledge about the subject at hand....but who would have the patience in showing me exactly what i had to troubleshoot.....
I couldnt find anyone till you came along...and thanxs once again for the patience you have taken in directing me every step of the way.....the pleasure is all mine
quote:
Your ISP may be able to/decide to upgrade you if you've had it long enough and you called and told them it wasn't working well.
Well i think the ISP may not be able to upgrade as i have bought this router from them...at the installation time.....they had the facility of renting.....but in the long run it would have been cheaper if i bought it.....so that's why i didnt rent it but bought it from them. But as of now i m stuck with this router....do you feel that it is necessary to buy a new one.
what are my options
(1.)Buy a new one
(2.)Try it from a internet cafe to RDP into the client.....
Bcos the basic(main) reason why i wanted to to try this RDP is , so that when i am traveling (which happens to be for 5-6mnths away from home), i should be able to access the desktop for some files or rectify in case some problem occurs with the Server as i am sharing these PCs with other users(family members who are not so experienced in rectification of problems), to be able to restore an image (via Acronis True Image), stuff like this....etc
(3.)Any other solution if you could suggest
I would like to share how i used the teamviewer and LogMeIn
(1.)With the Free LogMeIn account via webrowser from the Client PC i remote desktop into Server PC. But as LogMeIn free doesnt allow file transfer.
(2.)Started Teamviewer Quick solution, obtained ID and password from Server (via remote desktop of server via LogMeIn Free Acconut)
(3.)In Client PC opened Portable USB version of Teamviewer, put the password and ID, made a connection between the 2 PCs in teamviewer...once this was done you have full access of Server PC thru teamviewer
(4.)Than you can disconnect LogMeIn in the webrowser
(5.)Also one can check the dynamic ip thru DYNDNS update client installed in the taskbar when u r still connected to Server desktop via LogMeIn account (webrowser).
This is not related to the subject at hand but decided to share this. |
|
JamesLevinworth
@embarqhsd.net
| said by fms007 : quote:
Your ISP may be able to/decide to upgrade you if you've had it long enough and you called and told them it wasn't working well.
Well i think the ISP may not be able to upgrade as i have bought this router from them...at the installation time.....they had the facility of renting.....but in the long run it would have been cheaper if i bought it.....so that's why i didnt rent it but bought it from them. But as of now i m stuck with this router....do you feel that it is necessary to buy a new one. what are my options (1.)Buy a new one (2.)Try it from a internet cafe to RDP into the client..... Bcos the basic(main) reason why i wanted to to try this RDP is , so that when i am traveling (which happens to be for 5-6mnths away from home), i should be able to access the desktop for some files or rectify in case some problem occurs with the Server as i am sharing these PCs with other users(family members who are not so experienced in rectification of problems), to be able to restore an image (via Acronis True Image), stuff like this....etc (3.)Any other solution if you could suggest You don't need a new router if all you want to do is to be able to RDP or VPN into your site. The lack of NAT redirection is just getting in the way of being able to test RDP-WAN, or anything else that you would like to test from LAN->WAN->LAN. You'll just use whatever solution you choose from the outside anyway. I suggested getting a new router because not only could a new router give you that ability, it may have come with higher features (or less bugs a seasoned or) newer version has, and more ports. You still have the issue of not being able to get into the web admin on and off, which we haven't troubleshooted yet but I can foresee this coming into play again, also considering your current networking environment.. and the want to be able to fileshare with the router off, which we've dorked up with the bridge. We'll see what we can do to get this stuff fixed, but you may end up having to go out and buy a cheap (~$20USD) 5 port switch to hang off the router... We'll see what's going on with your web admin not loading.
BTW, you made the right decision at the time to buy the router....
said by fms007 :I would like to share how i used the teamviewer and LogMeIn (1.)With the Free LogMeIn account via webrowser from the Client PC i remote desktop into Server PC. But as LogMeIn free doesnt allow file transfer. (2.)Started Teamviewer Quick solution, obtained ID and password from Server (via remote desktop of server via LogMeIn Free Acconut) (3.)In Client PC opened Portable USB version of Teamviewer, put the password and ID, made a connection between the 2 PCs in teamviewer...once this was done you have full access of Server PC thru teamviewer (4.)Than you can disconnect LogMeIn in the webrowser (5.)Also one can check the dynamic ip thru DYNDNS update client installed in the taskbar when u r still connected to Server desktop via LogMeIn account (webrowser). This is not related to the subject at hand but decided to share this. Do you mean you want those functions, but you don't want to buy them? If so, there are other VPN clients we can setup that will work for you without having to go through someone else's server to authenticate. You just won't be able to test it internally, but you'll have direct access to your server too. That's up to you.
The dyndns client you can get from dyndns free.
FYI - I've got to cut out of here in the hour and won't be around this weekend. |
|
JamesLevinworth
@embarqhsd.net
| reply to fms007
said by fms007 :Oh.....what we did yesterday was not only necessary....but it was very informative for me I have been searching on different forums for somebody who would have not only sound knowledge about the subject at hand....but who would have the patience in showing me exactly what i had to troubleshoot..... I couldnt find anyone till you came along...and thanxs once again for the patience you have taken in directing me every step of the way.....the pleasure is all mine You're very, welcome. I hope you stay around BroadBandReports too. There's a lot of good people here (mostly), and we could always use some more. You'll learn a lot, and in turn give it back too.
Although I haven't been logged in, I have been a member for many years. And on that note... When I do this, I am not trying to be 'anon' from anyone here or from myself.. If for anything it's less hastles for me for reasons completely outside of the site (it's a work thing). Mostly, I am in a hurry and just don't bother (my bad). (The interesting side effect has been somewhat of an unintended social experiment on how some people treat you differently based on your logon status, although the majority don't.)
Anyhow... I never did say, "Welcome", so.. WELCOME to BBR. |
|
fms007
join:2009-05-24
| reply to JamesLevinworth
Hi
My net was giving me problems, but now it seems okay, after loaded back into my router old config settings which i had from way before...so couldnt reply sooner
By buying a 5 port switch will i be able to test LAN->WAN->LAN with rdp
quote:
If so, there are other VPN clients we can setup that will work for you without having to go through someone else's server to authenticate.
If i could set up another VPN client than it would be great bcos than i wouldnt have to use someone else's server.
Also please if you want i could post my email id here for a few moments till u jot it down and than delete it once u confirm having it....that way u could send me ur email id so that i could contact you....as you maybe away for the weekend |
|
JamesLevinworth
@embarqhsd.net
| said by fms007 :Hi My net was giving me problems, but now it seems okay, after loaded back into my router old config settings which i had from way before...so couldnt reply sooner By buying a 5 port switch will i be able to test LAN->WAN->LAN with rdp quote:
If so, there are other VPN clients we can setup that will work for you without having to go through someone else's server to authenticate.
If i could set up another VPN client than it would be great bcos than i wouldnt have to use someone else's server. Also please if you want i could post my email id here for a few moments till u jot it down and than delete it once u confirm having it....that way u could send me ur email id so that i could contact you....as you maybe away for the weekend Sorrry for your issues there. No, getting a port isn't going to help NAT redirection since the WAN address is what gets in the way. The switch/hub would give you the ability to talk between the PCs in the LAN and you'd be able to get rid of the bridges we made and thus the cable between your 2 PCs AND still be able to network between them with the modem/router off. Also the bridging thing (might.. not sure yet) be getting in the way of what's going on with how your getting routed that sometimes sticks that could possibly be the reason why your webpages fail to load (too soon to tell), but we might come up with a solution to that.
We can directly message through the site (and offline) when I log in. If I am not here, I am not on email either  I'll have to do that Monday though.. I gotta get something done here and bolt. Gotta be somewhere. |
|
JamesLevinworth
@embarqhsd.net
| reply to fms007
said by fms007 :My net was giving me problems, but now it seems okay, after loaded back into my router old config settings which i had from way before...so couldnt reply sooner Real quick, you should try using another DNS than the ones you do. I don't have time to troubleshoot it properly right now, but you could try some other DNS servers and see if that works out for you. You could try the OpenDNS I posted earlier, or any other ones you find that are reported being reliable. Put them in your router. Also, if your router is serving DNS to the LAN you could put the gateway ip 192.168.1.1 in your PCs DNS (and nothing) else, so the router is serving it to you, and test that. OR, use another DNS in your PC. Try different combos and see if that does anything... Also do some ping tests or some pathpings out to say, www.broadbandreports.com and your dns server IPs and see what you come up with.... ok..... gotta bolt. Post here any thoughts or anything you figure out and I'll also msg. you on Monday. |
|
fms007
join:2009-05-24
| reply to JamesLevinworth
quote:
I gotta get something done here and bolt. Gotta be somewhere.
Okay let me know when you can help me with the alternative VPN client. I'll check this same post in future too.
Please do message me when you login.
Also let me know when you can, what are your suggestions as to why the web admin page doesnt load....meaning the router config page gets stuck...as the other web pages work fine...only the router config page gives problem and this happens if i make even a small change in the router settings...like adding a client.....turning off DHCP.....turning off DMZ... any small change in the router and the next time i switch off and back ON with the router , the router config page starts getting stuck....could be that the firmware is flaky.....or corrupted |
|
fms007
join:2009-05-24
| reply to JamesLevinworth
quote:
Real quick, you should try using another DNS than the ones you do. I don't have time to troubleshoot it properly right now, but you could try some other DNS servers and see if that works out for you. You could try the OpenDNS I posted earlier, or any other ones you find that are reported being reliable. Put them in your router. Also, if your router is serving DNS to the LAN you could put the gateway ip 192.168.1.1 in your PCs DNS (and nothing) else, so the router is serving it to you, and test that. OR, use another DNS in your PC. Try different combos and see if that does anything... Also do some ping tests or some pathpings out to say, www.broadbandreports.com and your dns server IPs and see what you come up with.... ok..... gotta bolt. Post here any thoughts or anything you figure out and I'll also msg. you on Monday.
Alrite...will post my finding and wait for your reply on Monday |
|
fms007
join:2009-05-24 | reply to JamesLevinworth
And thanxs for your time |
|
fms007
join:2009-05-24
| reply to JamesLevinworth
Hi
How was your weekend.... hope u had a lovely time
(1.)Since i was not able to open webpages i enabled DMZ for SERVER (192.168.1.2)
(2.)Rebooted router and the pages opened
(3.)Next i agained disabled DMZ, rebooted router...even PC and tried to open webpages... they wouldnt open, the router pages opened once or twice and than the router page would also not open
(4.)So i changed the DNS nos to Open DNS Server nos
208.67.222.222 and 208.67.220.220,
(5.)Again rebooted router and tried to open webpages with new DNS nos.....no luck, neither web pages nor router page
(6.)So i enabled DMZ for SERVER (192.168.1.2), changed back to ISP given DNS nos.
(7.)Rebooted router and tried again....the webpages and the router settings page opened.
This is really strange that by disabling DMZ i cant access the net.... logically ther should not be a correlation betwn DMZ and opening of web pages but that is exactly what is happening. |
|
JamesLevinworth
@embarqhsd.net
| hey, thanks. Hope you had a nice weekend as well.
Just to be clear - When you say, "webpages"... Is it an internet web page (i.e. www.broadbandreports)? or are you testing internal web pages such as you are running a webserver? You mentioned 'client pages' previously and want to be sure. What address are you testing? ("Router pages" is assumed to be the router's admin at 192.168.1.1).
said by fms007 :(1.)Since i was not able to open webpages i enabled DMZ for SERVER (192.168.1.2) Hopefully, you disconnected from the WAN before doing this and didn't expose all ports to your PC directly to the WAN. Doing otherwise, (or without another device properly configured in between), would be a security risk. If you do understand what you're doing there, and okay with it, test away.
said by fms007 :(2.)Rebooted router and the pages opened If you were testing webpages (ie. internet) this would make sense since you placed that device/PC (SERVER) on the other side of the firewall and exposed all ports to it to the WAN. If you were testing your router pages, this should work DMZ or not.
said by fms007 :(3.)Next i agained disabled DMZ, rebooted router...even PC and tried to open webpages... they wouldnt open, (4.)So i changed the DNS nos to Open DNS Server nos 208.67.222.222 and 208.67.220.220, (5.)Again rebooted router and tried to open webpages with new DNS nos.....no luck, neither web pages If 'webpages' are internet, your PCs DNS settings will govern how web addresses are resolved. If you did not change your ISP dns in your PC (SERVER) to the same or did not change it to 192.168.1.1 in your PC to point to the DNS in your router to test DNS... Issues with DNS have not been ruled out, DMZ on or off either way.
said by fms007 :(3.)Next i agained disabled DMZ, rebooted router..., the router pages opened once or twice and than the router page would also not open. Accessing the router pages should work either way and the setting should consistently give you the same result. At this point, it sounds like router and/or firmware flake.
said by fms007 :This is really strange that by disabling DMZ i cant access the net.... logically ther should not be a correlation betwn DMZ and opening of web pages but that is exactly what is happening. Per the above, it should make more sense now.
I msg'd you Saturday morning to test other things... Hopefully you've seen that by now. I'll login in a bit.... |
|
JamesLevinworth
@embarqhsd.net
| reply to fms007
said by fms007 :And thanxs for your time You're welcome. |
|
fms007
join:2009-05-24
| reply to JamesLevinworth
Thanxs.....
Sorry couldn't come earlier, as i didn't realize u had sent a PM to my inbox.....when i read your post..i directly went to check the msg u had sent on sat. and decided to try out your suggestions.....
So till i tried out i was stuck as i couldn't connect back to the net (will explain what i mean)
quote:
ust to be clear - When you say, "webpages"... Is it an internet web page (i.e. www.broadbandreports)? or are you testing internal web pages such as you are running a webserver? You mentioned 'client pages' previously and want to be sure. What address are you testing? ("Router pages" is assumed to be the router's admin at 192.168.1.1).
Okay...now webpages refers to internet webpages (i.e. www.broadbandreports), though i try to first connect using google.com as this pages loads the easiest.
No i don't have a webserver.
The router page(router settings page) refers to 192.168.1.2 (admin) page.
As you ha messaged me to unbridge SERVER only,
(1.) i unbridged it....
(2.)reset the ip stack by the following command netsh int ip reset resetlog.txt
(3.)Put on the 2 unbridged connections (back to previous)
(4.)internet connection sharing OFF
(5.)Firewall off
(6.)Rebooted...tested
There was no luck.....couldnt access the internet pages and the router page itself wouldnt open
During this time DMZ was enabled.
Than i tried a lot of combos...like put Open DNS nos, Put back ISP DNS nos (changed these in the router as well as in the PC network adapter card), both combination of nos...no result.
Disabled firewall in router, DMZ enabled...no result
Enabled firewall in router, DMZ disabled...no result.
Uninstalled Outpost firewall, rebooted PC and router...no result.
Than installed back Outpost Firewall
Than finally enabled firewall in router, enabled DMZ pointing to 192.168.1.2 (SERVER)...rebooted modem....and everything was back to normal.....internet pages opening...router admin page opening....not once there was a problem after enabling DMZ.
At this point it occured to me to try out something for which i want your suggestions as to what are the consequences of what i have done.
Now the Server and Client are able to access the internet pages as well as open router admin page and communicate with each other via LAn(with router off as well as when router is on)
Settings
Outpost firewall ON
Router firewall ON
NAT On
DHCP is OFF as static ip is given to each PC
DMZ is ON, but not pointing to SERVER (192.168.1.2), nor is it pointing to CLIENT(192.168.1.4)....it is pointing to an ip which i have not given to any device(PC, network card, router) on the LAN.....meaning i have given 192.168.1.9 which is not assigned to any device on LAN.
End result: DMZ ON but pointing nowhere(192.168.1.9).
As some how though it doesn't make sense...but if DMZ is off nothing works.
What are your suggestion on this....regarding security aspect and consequences of keeping DMZ ON but not pointing to any device on the LAN.
Also i have attached Test results of test carried out by
Gibson Research Cooperation (www.grc.com) on my SERver as well as CLIENT with these settings which are at the present.
All the test are showing that the PC is in stealth mode....please check the attached jpeg files.
Will wait for your reply on this.... |
|
fms007
join:2009-05-24
| reply to JamesLevinworth
Let me know if the jpeg attachments of Gibson Research Centre webpages are accessible, if u can view them....also i forgot to attach the netsh int ip reset resetlog.txt
So am attaching to this post |
|
JamesLevinworth
@embarqhsd.net
| reply to fms007
I figured you didn't see the PM since you posted here after it and hence why I posted to your reply here in case you didn't know how to check for it.
A couple quick questions...
Cleaning the bridge up as stated in PM was secondary to a 'bug' you mentioned in a previous posts.. but updating the firmware in the router was primary and wasn't mentioned here in your reply. Did you get to do that?
You said your webadmin is at 192.168.1.2.. It should be at 192.168.1.1.. Did you typo that?
Request, if we're trouble shooting this, you'll have to leave the settings as we determined or I can't judge the results. Meaning, your outpost firewall was supposed to be off, and DMZ was not supposed to be enabled since last week until your recent posts again. So, we'll start trouble shooting from the top again with your new info.
How bout we take the rest of this offline now and do through PM as things are getting too muddled like this.
I'll shoot you a PM and we'll go offline for the rest.. We'll post the final results when we are completely done here. |
|
fms007
join:2009-05-24
| Hi
Today we achieved success of all our hard work (troubleshooting) which we carried out......thanks to you... and for all the IMs troubleshooting which we carried out....
I went to the cafe and tried out the RDP, and in the first attempt was able to login to my home PC...SERVER
First tried using dynamic ip, which i obtained by logging to the DYNDNS account of mine ...i checked what my dynamic ip was...which i than used into the rdp client program at the cafe, than tried using the username.dyndns.biz (hostname) and was aslo able to log in.
In both the cases had to put the rdp port, ie
69.96.3.123:54210 and
username.dyndns.biz:54210 only than it logs in to the Server.....just by putting the hostname without the port no it doesnt login
Also as i was there i tried using Teamviewer, which i had setup on my computer...it worked.
Than tried using LogMeIn which is a webrowser remote access and this too worked fine.
First when i tried the rdp, i had put Outpost off, before going to cafe, but router firewall was on.
Once i was able to login with outpost Off, i enabled it via remote access , than i disconnected the remote connection, and reconnected again with rdp and Outpost ON and success there too in all respects.
Meaning with router and software firewall ON it worked perfect.
I only was wondering how to erase the rdp hostname and port (tracks) from the cafe computer.
From the webrowser we can erase tracks by deleting cookies, etc, but how to erase such things from the remote client so that the next person who uses rdp will not find your info ....specially when you remote access the computer from a public place like a cafe.
I will be changing my port and hostname, but wish i could have erased it from the cafe computer.
So it goes to prove as you said that rdp is working fine but we were not able to achieve success before bcos of the loopback issue with my router. |
|
JamesLevinworth
@embarqhsd.net
| Hey! I see you got to test everything finally. Great on it working out.
I don't know how to delete the history in RDP without being an admin, which I don't think you'd be one at a cafe. (delete the hidden icon default.rdp).
I even looked for alternate methods on the MS site, and it's the same. »support.microsoft.com/?kbid=312169
Maybe someone else reading this knows a way and can post it? |
|
JamesLevinworth
@embarqhsd.net | I was just messing with it, and could with right-clicking the name (to highlight) and selecting delete. I doubt that removes it from the registry, but try that.
That's all I got. Sry. |
|
fms007
join:2009-05-24
1 edit | Hi
Yes you are right...to access and modify registry, one will have to have admin access and in a cafe we cannot access this...from the registry one cannot delete it.
But what i managed to find now was that..before using rdp
Firstly search and delete default.rdp (like you said) from My Documents and than use open and use remote client and what i found out was it doesnt store the ip no in the new default.rdp that it forms in the My document folder, nor does it make any registry entry in
HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Default
So could be that this is a work around to avoid the entries from appearing in the registry and in the rdp client box |
|
