Re: Routing and Domains

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Tom Rogers (trogers_at_IHATESPAM.schneiderequip.com)
Date: 03/26/04


Date: Fri, 26 Mar 2004 09:34:48 -0500

Ok, so domains are not my problems then.

But none of my hosts on the 172.16.1.0 network can access the Internet,
but they can ping and be pinged by the 192.168.7.0 network hosts.

Everyone on the 192.168.7.0 network can access the Internet though.

What do I need to do so that the 172.16.1.0 network hosts can access
the Internet?

This is my layout...

RoadRunner INTERNET
    |
Cable Modem
    |
    |
DHCP from RR ISP - NIC1 (into Cable Modem)
  RRAS 1 SVR (DHCP, DNS Svr)
192.168.7.1 - NIC2 (Static) (into 3COM Hub 1)
    |
    |
192.168.7.x hosts (DHCP from 192.168.7.1 Svr)
    |
(3COM HUB 1)
    |
192.168.7.11 - NIC1 (Static)
  RRAS 2 SVR (DHCP, DNS Svr)
172.16.1.1 - NIC2 (Static)
    |
(3COM HUB 2)
    |
172.16.1.x hosts (DHCP from 172.16.1.1 Svr)

On RRAS1 I installed only NAT and added both my NICs to NAT. My DHCP Svr
gives my clients 192.168.7.1 for ROUTER and DNS. RRAS1 is a DC (SOLO.NET),
I enabled routing in the registry, the properties on the RRAS1 server name
is set to route for LAN and Demand Dial.

I have also assigned a STATIC route of...

172.16.1.0 255.255.255.0 192.168.7.11 using the NIC2 interface

On RRAS2 I installed no routing protocol and my DHCP gives my clients
172.16.1.1 for ROUTER and DNS. RRAS2 is a DC (ROGERS.NET), I enabled routing
in the registry, the properties on the RRAS2 server name is set to route for
LAN only.

There is no static route set on RRAS2.

** I am so close. I went from no hosts anywhere having access to the
Internet,
and no host being able to ping either network, to only the 172.16.1.0
network
not having Internet access - but everyone can ping everyone.

What can I do to enable hosts on the 172.16.1.0 network to be able to access
the Internet?

Thanx for any help anyone can give. It has to be simple, but I am new to
RRAS.

TIA,

-Tom

"Srivatsan [MSFT]" <srivatsk@online.microsoft.com> wrote in message
news:OGk0G3wEEHA.684@tk2msftngp13.phx.gbl...
> Routing has nothing to do with domains.
>
> --
> Thanks, Srivats
> -----------------------------------
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Tom Rogers" <jeditom@NOJUNK.twcny.rr.com> wrote in message
> news:%23GjZ34uEEHA.2600@TK2MSFTNGP09.phx.gbl...
> > I have two networks (172.16.1.0) (192.168.7.0)
> >
> > I have two W2K Routers. One for routing between LANs and one for routing
> > Internet traffic.
> >
> > In order for the 172 network to get Internet access, do your servers
need
> to
> > be in the same domain?
> >
> > TIA,
> >
> > -Tom
> >
> >
>
>



Relevant Pages

  • Re: Using netmask ffffffff
    ... I am not trying to use the /32 mask for my entire network. ... The most important thing these new hosts need is connection to the outside ... The trouble is that even if I set-up firewall rules to filter their ... the switch they are all connected to, as only their internet traffic will ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Qualys
    ... I have worked quite closely with Qualys support and can confirm they do not have access to your scan/vuln data. ... Internet based scanning only occurs for Internet facing hosts. ... For internal hosts you need to purchase an appliance that would be located on your internal network. ... In my experience I have always had to slow down the scan in order to ensure no network devices get bumped off due to scan packets. ...
    (Pen-Test)
  • Re: How secure is SSL emails?
    ... >adversary able to manipulate the entire network (hosts and links) to his ... >of the nodes (an internal local active attacker), ... That would mean owning the Internet. ...
    (sci.crypt)
  • Re: Flash Worms
    ... Subject: Flash Worms ... the Internet is not perfect. ... diversity and complexity of this network can be summarized by any ... it significantly delimits number of "vulnerable hosts" ...
    (Incidents)
  • Re: Routing and Domains
    ... RRAS 2 should have the default gateway of 192.168.7.1. ... Also verify the route on RRAS 1 for the 172.16.1.0 network. ... > but they can ping and be pinged by the 192.168.7.0 network hosts. ... > Everyone on the 192.168.7.0 network can access the Internet though. ...
    (microsoft.public.win2000.ras_routing)