@gcbeldar - Based on what you replied, it seems right now someone is going to share the Public IP to you from the office. This is not a fool-proof method but let’s start with it for now. Try the steps below. Note that I am not an expert on this. So there might be inadvertent errors in this procedure, if you are stuck somewhere you can try google or take help from other forum members here.
Router Setup at office
- Define a range of DHCP IPs say 192.168.0.100 thru 192.168.0.150 (depending upon what IP gateway gets assigned i.e. 192.168.0.1 or say 192.168.1.1 etc )
- Every device that connects to your router be it WiFi or LAN must be defined with IP Reservation and leave the last 2 IPs 192.168.0.149 & 192.168.0.150 unassigned. These 2 will be assigned in VPN Setup. This step is important!
- Forward Port 1723 to Office PC LAN IP (To keep this simple if your router offers DMZ, put the Office PC on DMZ, however this exposes it to direct Internet despite behind router and should be only done during temporary testing)
- Relax Firewall settings in router for the time being.
Office PC
- Preferably have it wired to LAN port of the router. Avoid wireless for now.
- Disable Windows Firewall or any third-party firewall including its service for the time being. Else it’s going to make it complicated in the beginning, if you can make a connection first, then setup firewall later for proper security.
- Under Network Connections – File Menu -Create an incoming connection. Search google how to do it. Set IPv4 as 192.168.0.149 thru 192.168.0.150 (just 2 IPs that MUST be from within Routers DHCP Range to keep it simple) Incoming connection is available under File menu which is generally hidden on this screen. Search google how to make it visible; I simply do not remember!! Under Incoming IP Properties tick Allow Callers to Access my LAN
- That userid to which you are granting incoming access must have a password on Windows 10 on Office PC.
- In incoming connection disable IPv6
- Most Imp – Under Networking settings for the Incoming connection, if there’s any firewall component, uncheck it for now
- Refresh the view and you will see the incoming connection created
- Enable the necessary services like Remote desktop, file sharing, shared folders etc upfront.
Remote Laptop that’s on another Internet connection like Jio hotspot.
- Go to Control Panel\Network and Internet\Network and Sharing Center
- Click Setup a new connection
- Connect to Workplace
- Using my Internet
- Specify the public IP address of the office router. Give a name to connection and this is done (every time you will have to check for this IP thru someone in office before making a connection)
- Now to go Settings – Network and Internet – VPN. Select the VPN Connection – Advanced and Set PPTP (this is less secure but start with this, else leave it as Auto) and Sign in option Username/Password is selected
- When VPN connection is selected, go to Advanced sharing options, (right pane) and enable network discovery and file and print sharing
- Temporarily disable Firewall on home laptop
Now try connecting to the Office PC by using the Client VPN connection that you created on home Laptop. Use the same Userid to which you granted incoming VPN access on office PC. See if the LAN IPs that you specified are allocated to respective PCs. Then they shall be on the same LAN.
Other considerations, difficulties, deadlocks
Office PC Firewall – When Firewall is enabled on office PC, you must allow access to port 1723 and enable
GRE protocol in the firewall at a minimum. Both could be required.
ISP Blocking 1723 inbound – If so, you will have to contact them and check if they can enable it for you. I am not too sure if VPN service can be moved to some other port. Or alternative is to send request it to some other port nnnn over Internet if allowed (I am not too sure) and if Router offers what’s called Virtual Server then reassign that port nnnn to internal 1723 in port forwarding.
Router in office received Private IP from BSNL. Well then nothing is going to work. You will have to use some third-party VPN services (generally Paid) to make a connection and that makes it further complex.
If this succeeds then you can aim for
Configuring Firewall on router and office PC for better security
Using Dynamic DNS thru NO-IP.com or TP Links any DDNS service if offered.
Remotely switching ON the office PC whenever you want and shutting it down remotely when work is done thru magic packets.
