How do I use VPN for file sharing?

Question

Level 1

15 points

How do I use VPN for file sharing?

Hi folks, hope you can help.

I need to find a method for file sharing between my company's two offices, which are not only in different countries but also use both PCs and Macs. I think setting up a VPN is the way forward.

My file server is a Mac Mini running the standard client version of OS 10.5.4, with a static IP, 217.xxx.xxx.xxx. I need the PCs and Macs to access its resources. It is set up to share its files using FTP, AFP and SMB. It is running the application iVPN Server, which I understand is a GUI that makes the built-in OS X VPN Server function available to the client edition of OS X.

I am currently overseas and can connect to the Mac Mini over VPN. The problem is that I cannot seem to access the Mac Mini's files - I don't know what to do having established the VPN connection. I was half-expecting it to show up in the Finder under Shared or something.

The Mac Mini has a local IP of 10.0.1.20, but the VPN Server is issuing an IP to all clients in the range 192.168.2.200 and beyond. Is this where I'm going wrong?

Should the Mac Mini VPN Server also connect to itself, using VPN, as a client?

I'm really stuck, all help is very much appreciated. Thank you!

MBP 15" Core Duo, Mac OS X (10.5.4), 2GB Apple RAM, 256MB Graphics

Posted on Aug 26, 2008 8:04 AM

Reply

Answer 1

Aug 26, 2008 8:13 AM in response to jimbo2k

VPN doesnt support automatic computer discovery over the network, so you will have to know your computers' IP addresses and then use the "connect to" Finder menu option to connect.

1. Press command-K in the finder to get to the "connect to" window.
2. Type "afp://ip_address" to connect to that computer if it's a mac, or "smb://..." if it's a PC.

If you have Back to My Mac enabled (provided you subscribe to MobileMe) you can use that to connect between computers, and using a VPN will bypass any firewall or router problems that may otherwise hinder the BTMM connectivity.

Message was edited by: Topher Kessler

Reply

Answer 2

jimbo2k Author

Level 1

15 points

Aug 26, 2008 8:37 AM in response to Topher Kessler

Thanks for prompt reply Topher..

I am familiar with the Connect to Server window, but I am not sure which IP I should be using. Assuming no VPN connection for the moment, and assuming I'm on a remote network, I can connect to the User's documents folder on the Mac Mini already by typing afp://[username:password]@[static WAN ip]/Documents

However, I need to ensure that SMB shares work (I know they work when I'm on the local network). So I type smb://[username:password]@[static WAN ip]/Documents but this fails to connect to the User's Documents folder.

To make the SMB shares work I think I have to connect using VPN. So I connect to the Mac Mini via VPN, and my laptop is issued a VPN IP of 192.168.2.200. Of course my laptop also has an IP from my local network. Do I need to rearrange my network order in System Preferences?

So I'm now connected via VPN. However to view the Mac Mini's files, surely it also needs to have an IP issued by the VPN Server? But the Mac Mini is the VPN server. So should I go into its System Preferences and set up a VPN connection to itself?

Now back on the laptop and I want to browse User's Documents folder on the Mac Mini using SMB. I go Connect to Server, and I guess I would type smb://[username:password]@[Mac Mini's VPN IP]/Documents

Am I on the right track? Thanks again...

Reply

Answer 3

jimbo2k Author

Level 1

15 points

Aug 26, 2008 8:51 AM in response to Topher Kessler

A quick addition...

Just read on another forum that it might make a difference having Remote Management / Login enabled on the Mac Mini. I do have these options enabled in System Prefs > Sharing.

Should I be disable these, or perhaps I should be using SSH instead? Bearing in mind I need something fairly automatic/user friendly for our remote Windows users to connect to the Mac Mini and share its files.

Reply

Answer 4

Aug 26, 2008 9:18 AM in response to jimbo2k

Some institutions block SMB access from the internet because it's so widely used for hacking, but if it's a home setup then you may need to configure your router (port forwarding and such) to connect via SMB if you want to use the WAN ip address as you described (not using VPN). Still, going through the VPN should allow you to do it.

The Mac Mini is the VPN server, but that doesnt give it anything special. It just provides VPN clients with an IP address and tunnels them through to the local network. It's still up to the client to properly communicate with desired resources on the network. Once the tunnel is established, the VPN server's job is done.

The mini is giving your laptop a VPN IP address (local network address), but it also has it's own local network IP address that you'll need to enter in the "connect to" window in order to start a file transfer session with it using various protocols. Ensure the proper sharing protocols are enabled and properly configured for BOTH machines, and then enter the address as you described (smb://user:pass@VPN_IP/ -- with VPN_IP being the local network IP for the Mac Mini).

You should not need to rearrange your network order, but one thing you might try doing is in the VPN settings check the option to ensure all traffic goes over the VPN.

Reply

Answer 5

Aug 26, 2008 9:19 AM in response to jimbo2k

These other services should not affect your ability to connect to the Mini via SMB or other protocols, but for troubleshooting you might turn off everything except for what you need.

Reply