Re: PPTP Site-to-Site VPN problem

Sergio Ricci wrote: 
Wendel,

Pls see the output below. The trace was carried out from a client on the 192.168.31.0 subnet who's default g/w points to the LAN NIC of the RRAS server on the same subnet. NB: I've abbreviate the output to 4 hops. The complete output continues giving "Request timed out".

Tracing route to 192.168.30.5 over a maximum of 30 hops

1    <1 ms    <1 ms    <1 ms  192.168.31.4
2     7 ms     7 ms     7 ms  192.168.31.110
3     *        *        *     Request timed out.
4     *        *        *     Request timed out.

192.168.31.110 is the IP address obtained by the RRAS servers PPP adapter that is on subnet 192.168.30.0, so it appears to get as far as the RRAS router on the other side of the VPN link but gets stuck there. I note also that there is *no* default gateway set for the PPP adapter and so could this be the cause?

I confirm that both servers are multi-homed with each having 1x NIC facing the LAN with no default gateway set and the other NIC connected to the DSL router with a static IP address and default gateway set.

Funnily enough, I am able to configure a VPN connection on a client on the 192.168.31.0 subnet to connect to the RRAS server on the 192.168.30.0 subnet and it works fine.

Please let me know if you need any further info and thank you also for you help so far.

Sergio


"Wendel Hamilton" <WendelHamilton@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:47D20B6B-F0E2-4F81-B9DC-7D51E883799F@xxxxxxxxxxxxxxxx

Sergio,
Ok I think it is a routing problem.
use tracert -d to the remote server and workstations and see where it fails.
Could you post the results?
I assume that both servers are multi-homed servers. (2 NICs)

"Sergio Ricci" wrote:


Yes. Deafult g/w points to the the internal NIC of the RRAS server.

One thing I didn't mention if that both servers are DC's.

Thanks for replying.
Sergio

"Wendel Hamilton" <WendelHamilton@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:0F15E7AE-11C1-4B7A-8476-5A85144B857D@xxxxxxxxxxxxxxxx

Sergio,
Does your clients default gateway point to your RRAS servers?


"Sergio Ricci" wrote:


Hi,

I've setup (or tired to) a site to site VPN using RRAS in Windows 2003
SP1
but have a few issues that I hope you may be able to help me resolve:

Subnet 192.168.30.0/24<------------------------------------------>Subnet
192.168.31.0/24

ClientsA-------Server1----Router1--------Internet--------Router2---Server2-----ClientsB

I have setup demand dial connections on both servers (windows 2003+SP1)
and
they appear to work OK. Note that there are demand dial connections on
both
servers pointing to the other server. The servers can ping each other.
The
clients can ping the servers on their subnets but cannot ping any host on
the other subnet.

All this has led me to think (from other posts I have read) that there
may
be an issue with the user account and demand dial interface name but I
believe I have go them correct.

Essentially I would like clients on one subnet to be able to
transparently
access and connect to servers/clients/hosts on the other subnet.

I'm probably missing something quite obvious but at this moment just
can't
see what it is.

Some other bit's of info that you may need: when I originally configured
RRAS on both servers I did a custom configuration and selected: NAT,
Demand
Dial, Firewall, LAN Routing (from memory). All clients have internet
access.

If you require any further info, please let me know.

Thanks in advance for any help/pointers.

Kind regards,
Sergio








Sergio - A bit off topic to start!! - Are your router capable of VPN natively?

What IP addresses are on the additional cards? Are the cards in the DMZ of your routers or are you using port-forwarding, if so, what ports are you forwarding.

Ian
.

Relevant Pages

  • Re: Questions on Site Boundaries
    ... our servers are all part of the same ... AD site as our clients. ... since I need to have a SMS Primary to service ... > that the old ip subnet way. ...
    (microsoft.public.sms.setup)
  • Re: Make a DC only resolve the subnet its on?
    ... DC Server C is in subnet 6 and clients are in 2-10. ... Looking at the logs users are logging on any of these 3 servers. ... the site preferred servers have populated correctly? ...
    (microsoft.public.windows.server.active_directory)
  • Re: PB with r client installation with SMS 2.0 SP5
    ... Your XXX.YYY.130.0 subnet is not within any of your site boundaries. ... > Active Directory domain and we have problem installing some clients. ... > we are going to class our servers in different vlans ...
    (microsoft.public.sms.admin)
  • Re: Make a DC only resolve the subnet its on?
    ... DC Server C is in subnet 6 and clients are in 2-10. ... Looking at the logs users are logging on any of these 3 servers. ... Why do users on all subnets still authenticate to server C? ...
    (microsoft.public.windows.server.active_directory)
  • Re: PPTP Site-to-Site VPN problem
    ... Deafult g/w points to the the internal NIC of the RRAS server. ... One thing I didn't mention if that both servers are DC's. ... > Does your clients default gateway point to your RRAS servers? ... >> the other subnet. ...
    (microsoft.public.windows.server.networking)
Loading