Help : Connecting Office Computer via Internet using VPN

OP
G

gcbeldar

In the zone
Office cpu is win 10 pro, all apps, data & printers connected. This cpu should be access by LAN with internet.
 
Last edited:

whitestar_999

Super Moderator
Staff member
Office cpu is win 10 pro, all apps, data & printers connected. This cpu should be access by LAN with internet.
You mean office pc(cpu is technically processor). You can share drives on this pc over net using complicated network setup which requires you to have static ip(bsnl charges extra for it) or services like dyndns/noip but it is only for sharing data not apps. It won't be like person sitting in home will be able to use tally installed in office pc.
 
OP
G

gcbeldar

In the zone
1. (Office CPU Config) Processor Core i5, 8GB, 256gb Samsung SSD
2. regarding tally Upgrading to the Latest Release in a Multi-User Environment

FYI : Tally allowed to use "single user edition" in on PC. I want to know how to connect office pc using VPN (for secure) and making laptop on the same subnet. So that, I can access files and devices.
 

whitestar_999

Super Moderator
Staff member
1. core i5 but which gen/model.
2. you want to run Tally multi-user for just 2 PCs?

What you want to do is very complicated & not worth the hassle in my opinion. Just use tally single user edition on laptop at home, use google cloud printer for sharing printer in office over net & use google drive/one drive to simultaneously access & edit shared docs/files in office pc.
 

patkim

Cyborg Agent
@gcbeldar

I want to know how to connect office pc using VPN (for secure) and making laptop on the same subnet. So that, I can access files and devices.

I am not a networking expert but if above is what you want to achieve in principle, then I might have some specific inputs. I can’t ascertain if it will work but if you are interested, be prepared for some experiments, learning curve & also possible roadblocks.

Before that do clarify a few things as below.

Questions for you….

  • What is the Internet connection / setup at both ends? Do you have a router at one end (If so what end)/both ends or not at all? If so the brand/model of the router(s)?
  • Does BSNL offer you a public IP to the PC or to whatever (usually Router or that office PC) is at the WAN port in office? I guess BSNL does so, still checking. Public IP is important else it’s bit harder. If not, ask for it and you might have to pay additional charges per month if allowed by ISP. I guess BSNL also offers Static (Public) IP, do check on that front too.
  • Is the PC in office ON 24x7? Is it on UPS? Is its BIOS configured to always restart after power failure?
  • Can the Admin in office take direct or indirect orders from you?
  • I believe the OS on both PCs is Windows 10?
  • What have you tried so far if any that did not work?
 
Last edited:
OP
G

gcbeldar

In the zone
1. Office BSNL BroadBand(TP Link-w8961), other mobile hopspot / jio dongle.
2. Will opt later, but now "Internet IP Address is shared by the Person how using Office CPU" to other
3. No
4. Yes
5. Office : Win 10 pro, Other laptop is Win 10 home
6. When required, Laptop is allowed to use Remote Desktop
 
OP
G

gcbeldar

In the zone
1. core i5 but which gen/model.
2. you want to run Tally multi-user for just 2 PCs?

What you want to do is very complicated & not worth the hassle in my opinion. Just use tally single user edition on laptop at home, use google cloud printer for sharing printer in office over net & use google drive/one drive to simultaneously access & edit shared docs/files in office pc.
Using same way, Trying for a betterment and assuming useful for others. Since, unable to find any article this type of setup "Connecting Two PC via Virtual LAN" details on the internet
 

patkim

Cyborg Agent
By Virtual LAN, do you mean to say that you want your office PC that is on BSNL Internet and Home laptop on Jio, to connect over VPN in such a way that they get Private IPs under same subnet and come under same LAN yet they are over different Internet connections?

Also if I understand, the Public IP of the TP LInk router connected to office PC will be shared by someone in office to you thru other means like SMS/WA/Phone etc?
 

whitestar_999

Super Moderator
Staff member
By Virtual LAN, do you mean to say that you want your office PC that is on BSNL Internet and Home laptop on Jio, to connect over VPN in such a way that they get Private IPs under same subnet and come under same LAN yet they are over different Internet connections?

Also if I understand, the Public IP of the TP LInk router connected to office PC will be shared by someone in office to you thru other means like SMS/WA/Phone etc?
Jio does not give unique public IPs & no port forwarding either unlike bsnl where you get unique dynamic public IP(static public IP for ~1500 extra per year) as well as port forwarding. He wants to create a VPN between two networks.
 

whitestar_999

Super Moderator
Staff member
Using same way, Trying for a betterment and assuming useful for others. Since, unable to find any article this type of setup "Connecting Two PC via Virtual LAN" details on the internet
*www.howtogeek.com/135996/how-to-cr...ows-computer-without-installing-any-software/

*pureinfotech.com/setup-vpn-server-windows-10/

You need to start with at least something like above.
 
Last edited:

patkim

Cyborg Agent
@gcbeldar - Based on what you replied, it seems right now someone is going to share the Public IP to you from the office. This is not a fool-proof method but let’s start with it for now. Try the steps below. Note that I am not an expert on this. So there might be inadvertent errors in this procedure, if you are stuck somewhere you can try google or take help from other forum members here.

Router Setup at office

  • Define a range of DHCP IPs say 192.168.0.100 thru 192.168.0.150 (depending upon what IP gateway gets assigned i.e. 192.168.0.1 or say 192.168.1.1 etc )
  • Every device that connects to your router be it WiFi or LAN must be defined with IP Reservation and leave the last 2 IPs 192.168.0.149 & 192.168.0.150 unassigned. These 2 will be assigned in VPN Setup. This step is important!
  • Forward Port 1723 to Office PC LAN IP (To keep this simple if your router offers DMZ, put the Office PC on DMZ, however this exposes it to direct Internet despite behind router and should be only done during temporary testing)
  • Relax Firewall settings in router for the time being.


Office PC

  • Preferably have it wired to LAN port of the router. Avoid wireless for now.
  • Disable Windows Firewall or any third-party firewall including its service for the time being. Else it’s going to make it complicated in the beginning, if you can make a connection first, then setup firewall later for proper security.
  • Under Network Connections – File Menu -Create an incoming connection. Search google how to do it. Set IPv4 as 192.168.0.149 thru 192.168.0.150 (just 2 IPs that MUST be from within Routers DHCP Range to keep it simple) Incoming connection is available under File menu which is generally hidden on this screen. Search google how to make it visible; I simply do not remember!! Under Incoming IP Properties tick Allow Callers to Access my LAN
  • That userid to which you are granting incoming access must have a password on Windows 10 on Office PC.
  • In incoming connection disable IPv6
  • Most Imp – Under Networking settings for the Incoming connection, if there’s any firewall component, uncheck it for now
  • Refresh the view and you will see the incoming connection created
  • Enable the necessary services like Remote desktop, file sharing, shared folders etc upfront.
Remote Laptop that’s on another Internet connection like Jio hotspot.

  • Go to Control Panel\Network and Internet\Network and Sharing Center
  • Click Setup a new connection
  • Connect to Workplace
  • Using my Internet
  • Specify the public IP address of the office router. Give a name to connection and this is done (every time you will have to check for this IP thru someone in office before making a connection)
  • Now to go Settings – Network and Internet – VPN. Select the VPN Connection – Advanced and Set PPTP (this is less secure but start with this, else leave it as Auto) and Sign in option Username/Password is selected
  • When VPN connection is selected, go to Advanced sharing options, (right pane) and enable network discovery and file and print sharing
  • Temporarily disable Firewall on home laptop
Now try connecting to the Office PC by using the Client VPN connection that you created on home Laptop. Use the same Userid to which you granted incoming VPN access on office PC. See if the LAN IPs that you specified are allocated to respective PCs. Then they shall be on the same LAN.

Other considerations, difficulties, deadlocks

Office PC Firewall – When Firewall is enabled on office PC, you must allow access to port 1723 and enable GRE protocol in the firewall at a minimum. Both could be required.

ISP Blocking 1723 inbound – If so, you will have to contact them and check if they can enable it for you. I am not too sure if VPN service can be moved to some other port. Or alternative is to send request it to some other port nnnn over Internet if allowed (I am not too sure) and if Router offers what’s called Virtual Server then reassign that port nnnn to internal 1723 in port forwarding.

Router in office received Private IP from BSNL. Well then nothing is going to work. You will have to use some third-party VPN services (generally Paid) to make a connection and that makes it further complex.

If this succeeds then you can aim for

Configuring Firewall on router and office PC for better security

Using Dynamic DNS thru NO-IP.com or TP Links any DDNS service if offered.

Remotely switching ON the office PC whenever you want and shutting it down remotely when work is done thru magic packets.
 
Last edited:
OP
G

gcbeldar

In the zone
@patkim

First Thanks a lot. Your suggestion / solution is inline of my requirement.

In the meantime, I tried to a lot your solution but, failed.
Then found my first step is not correct.
i.e., using modem setting page and What Is My IP Address? IP Address Tools and More to get my "Internet IP address, assigned ISP" of my Office CPU.
And found I am unable to ping my Internet IP Address of Office CPU with my Laptop internet connection.

Waiting for your reply.
 

patkim

Cyborg Agent
I am not too sure what do you mean by Internet IP address of Office CPU. You should get Public IP (Routable IP) to your modem router from BSNL and you have to use that IP address and use port forwarding. However first step is to put your Office PC in DMZ (De-Militarized Zone) so that no port forwarding is needed. (This is only for testing to keep it simple) By default Ping is disabled by Firewall on most routers. Routers do not respond to Ping requests over WAN. Keep Firewall / SPI etc disabled in Router for the time being. Check the settings in your modem router. Then use www.Yougetsignal.com to check if port 1723 is open after creating incoming connection on Office PC.

Is the IP shown by What is my IP Address and what's seen inside modem router connection status same? If not the issue starts from there.

Such a setup of VPN between 2 PCs does take some time to make it work!! And as I mentioned there might be some deadlocks.

Do not count much on Ping, instead, if your router modem supports Remote Admin setup, enable that and check if you can access its admin page over the Internet using its public IP. Configure it to use port 8080 (or see if some other can be used) etc as 80 is mostly blocked by most ISPs. If you can succeed in this step, then it confirms that at least ISP is not blocking 8080 and your router is indeed routable on the Internet. First stage cleared if so.
Do update the outcome of these tryouts. All the best.
 
Last edited:
OP
G

gcbeldar

In the zone
Thanks a lot, for your response.

Successfully connected. After configuring "Incoming connection's IPv4 set to 192.168.1.215 to 192.168.1.216".

Laptop connected and received IP address : 192.168.1.216 with subnet : 255.255.255.255

Will update regarding security, speed etc. so that complete information should be available for all new user.

Please suggest further if any.
Once again thanks a LOT
 

Nerevarine

Incarnate
You should really frame your requirements properly instead of adding information post by post. It would help others who might be stuck on a similar problem.

IF you do not have a non nat blocked IP address, you can always use serveo or ngrok to ssh tunnel. Both are free services to port forward a single port. if you need multiple ports exposed, like say you need printer + other application, u may use a reverse proxy like HAProxy or nginx.

Lastly, if you are able to connect via VPN and want port exposed that way, you can use a free AWS server and setup openvpn. It allows 2 simultaneous connections for 1 year.

Instead of VPN on AWS, u can even SSH tunnel.

I haven't tried the above, the other two I'm using all the time.
 
Last edited:

whitestar_999

Super Moderator
Staff member
You should really frame your requirements properly instead of adding information post by post. It would help others who might be stuck on a similar problem.

IF you do not have a non nat blocked IP address, you can always use serveo or ngrok to ssh tunnel. Both are free services to port forward a single port. if you need multiple ports exposed, like say you need printer + other application, u may use a reverse proxy like HAProxy or nginx.

Lastly, if you are able to connect via VPN and want port exposed that way, you can use a free AWS server and setup openvpn. It allows 2 simultaneous connections for 1 year.

Instead of VPN on AWS, u can even SSH tunnel.

I haven't tried the above, the other two I'm using all the time.
For non NAT IPs given by broadband ISPs (bsnl,airtel,reliance) the inbuilt win 10 vpn server is good & simple enough. Anything more than this is not easily achievable by your typical pc user. :)

That AWS server looks good but is it really free, I mean no data limit or data storage charges etc.
 
Top Bottom