I've set up our XServe with MacOS X Server 10.5.2 to do AFP and VPN
(L2TP only; PPTP is disabled). The XServe is a standalone server,
not connected to any other direstory server.
Same single XServe running both AFP and L2TP services?
I can connect to the XServe's AFP server from my Mac over our wired
and wireless network. The AFP server shows up in the sidebar of
Finder windows. So far, so good.
I am able to successfully connect to our network via the VPN with
Mac OS X 10.5.2 client (on two different machines) using L2TP
through our network's firewall (on a Netopia T1 router; UDF ports
500 and 4500 and IP Protocol 50 and 51 are open) using a shared
secret.
OK, good, so you can successfully establish the VPN.
But I cannot connect to the XServe itself to use Server Admin
Using what IP address? Or are you using it's DNS name? If the latter
which does dig return for it on the machine from which you issue the
Server Admin connection?
or AFP (using afp://server.company.com or afp://xxx.xxx.xxx.xxx
*Please* do not obfuscate IP addresses. It's important data that
you're making us guess about.
That said, see above.
via the Go > Connect to Server command). Other iChat users in my
office also do not automatically show up in the Bonjour list when I
connect to the network. Other computers on our network do not appear
in the sidebar of a Finder window.
Bonjour does not work over VPNs. This is the expected behavior.
Now, here's the odd part. There is a second server (v10.4.11) on our
network running AFP. I can connect to it (using afp://server.company.com
via the Go > Connect to Server command) and mount its various
sharepoints via the VPN.
And I'll bet it's DNS name looks up just fine.
The only thing I see in the VPN log that seems amiss is this (but I
have no idea what it means):
Tue Mar 11 23:09:27 2008 : Unsupported protocol 0x8057 received
--Both the 10.5.2 and the 10.4.11 servers have DNS properly
configured (though our ISP; we're not running our own DNS).
I'll bet you a doughnut this isn't true.
I'm hoping I don't need to have the XServe run DNS as an internal
LAN DNS server.... And I'm not sure why I would have to if I can
already successfully connect to the 10.4.11 AFP server .
Well someone would have to provide DNS for the hosts in question if
they aren't real (public) DNS domains.
-dhan
------------------------------------------------------------------------
Dan Shoop
Computer Scientist
iWiring / U.S. Technical Services
