You are the network administrator for one of your certifyme’s branch offices. Ten employees work in the branch office. All client computers in the branch office run Windows XP Professional. All client computers have manually configured IP addresses in the 192. 168. 1. 0/24 range. The branch office has a cable modem connection to the Internet. All employees in the branch office need access to the main office by means of a virtual private network (VPN) connection over the Internet. The VPN connection is configured as shown in the exhibit.
Employees in the branch office report that they cannot access resources that are located on the main office network. You investigate and discover that you can establish a VPN connection locally on a client computer named Pro1 and can access main office network resources. However, you cannot connect to Pro1 other computers on the branch office network. You want all employees in the branch office to be able to access main office network resources by means of the VPN connection on Pro1.
What should you do?
A.
Disable Windows Firewall on the main office VPN connection.
B.
Add a port exception to Windows Firewall to allow incoming PPTP traffic on the main office VPN connection.
C.
Select the Allow other network users to control or disable the shared Internet connection check box.
D.
Configure all client computers in the branch office to obtain IP addresses automatically.
Explanation:
You can establish a VPN connection to the main office and access main office resources. However, you cannot connect to local resources from your client computer (Pro1). The VPN connection on Pro1 is shared using Internet Connection Sharing. This changes the IP address of the LAN interface to
192.168.0.1 and enables DHCP on that interface. The branch office network is using a 192.168.1.0 address range which is why the branch office users are unable to access the VPN connection and why you are unable to access the branch office computers from Pro1.
If you configure all client computers in the branch office to obtain their IP addresses automatically, they will receive IP addresses in the 192.168.0.0/24 range which will enable them to access the VPN.Incorrect Answers:
A: The fact that you can access the main office network from Pro1 indicates that the firewall at the main office is correctly configured.
B: The fact that you can access the main office network from Pro1 indicates that the firewall at the main office is correctly configured.
C: This would enable users to disconnect the shared internet connection (if they could access it). It won’t however enable the users to access the VPN connection.Reference:
Lisa Donald & James Chellis, MCSA/MCSE: Windows XP Professional Study Guide
Second Edition, Sybex Inc., Alameda, 2003, pp. 470-471