Re: Static routes for VPN Clients

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Priya Raghavan [MSFT] (priyadr_at_online.microsoft.com)
Date: 11/25/04


Date: Thu, 25 Nov 2004 16:08:49 +0530

Your RRAS Server should have 2 interfaces: 1 for the Network A and another
for Network B. Only then client which VPN into the RAS Server can contact
machines in the Network B.

As per the below info, the RRAS Server seems to have only 1 interface and
that is in Network A.

BTW, which network is your client on? (Because by modifying the routes on
the client, you are able to access Network A and B)

-- 
Thanks,
Priya.
------------------
This posting is provided "AS IS" with no warranties, and confers no rights.
"KJ" <kurtkearney@yahoo.com> wrote in message
news:c8f9d4de.0411241352.1916db8d@posting.google.com...
> I need some help with RRAS VPN clients and their static routes.
>
> I have 2 networks
> Network A 192.168.1.0/24
> Network B 192.168.2.0/24
>
> Router on Network A IP is 192.168.1.1
> Router on Network B IP is 192.168.2.1
>
> RRAS Server IP 192.168.1.200
>
> Currently I have RRAS configured to allow PPTP clients access
> configured on a Windows 2000 server located on Network A.  IP
> addresses are handed out to the clients via DHCP server not a set
> pool.
>
> When I connect to Network A using vpn client I can gain access to
> anything and everything on Network A.  However I cannot gain access to
> anything on Network B.
>
> If I add the following to my route tables on my VPN Client
> route add 192.168.2.0 mask 255.255.255.0 192.168.1.1
> route add 192.168.2.255 mask 255.255.255.255 192.168.1.1
>
> I am then able to gain access to both Network A and B.
>
> I cannot seem to find a way to push those routes to the VPN client
> when they log in.  I tried adding it to the apply static route under
> the Dial in tab in active directory but that did not seem to do
> anything.  I tried to add it in the Static route section of the RRAS
> msc but that did not seem to do anything either.  I know I am missing
> something really simple but I just do not know what it is.
>
> Could someone here please help.
>
> Thanks
> KK


Relevant Pages

  • RE: Slow VPN logon and Spuratic folder visibility
    ... I understand that the remote VPN client ... network configuration. ... the VPN client can access SBS fine? ... Slow VPN logon and Spuratic folder visibility ...
    (microsoft.public.windows.server.sbs)
  • Re: Outgoing VPN Error 619
    ... Outbound VPN problem: ... Q1 - is the test client configured as SecureNET? ... Q2 - what do you find in the ISA logs for your tests? ... I've checked in local network rules and I do have a rule called VPN clients ...
    (microsoft.public.isa.vpn)
  • Re: VPN issues on SBS2003 with ISA 2004 installed
    ... Based on our work above, it seems the problem in client side, so I suggest ... and then click the Network and Dial-up ... Right-click the VPN connection that you want to change, ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN clients unable to connect to other resources.
    ... on the SBS 2003 server just not sure where to go for help on it. ... Next time I'm at my home PC, I'll VPN in and see what IP info I'm getting ... client PC on your LAN, you should be able to do so from a remote VPN client, ... get the network path was not found. ...
    (microsoft.public.windows.server.sbs)
  • TidBITS#792/15-Aug-05
    ... We also note the release of Security Update 2005-007, ... Macintosh FTP client, free for educational and charitable use. ... mentioned virtual private network (VPN) technologies. ...
    (comp.sys.mac.digest)