Re: route trafic from external to internal adapter

Tech-Archive recommends: Fix windows errors by optimizing your registry



Hi Bill,
Thanks for your answer.
I have Cisco 877 router on that site and that one has static route to
192.168.30.X setup.
I have RRAS active on a SBS server and no firewall software I know of.
One of the concerns is the following:
When I traceroute from 10.1.1.1 cisco router to 192.168.30.10, I am geting
no IP addresses showing in path. I presume 10.1.1.2 is suppose to show as a
step in a path, but I can not see it. Is that because Cisco router is not
routing to the right gateway or because some block exists on SBS external
interface (10.1.1.2)?
Unfortunately, the site is far away and i do not have access to it. I also
have no remote access to 10.1.1.X workstations (no credentials to log on).

Regards,
Alex



"Bill Grant" wrote:

The first thing you have to do is enable IP routing on the server, so
that it can forward the traffic. The next thing you need to do is add extra
routing to get the traffic to the internal router.

The routing would look like this.

Internet
|
gateway
10.1.1.1
|
workstations
10.1.1.x dg 10.1.1.1
|
10.1.1.2 dg 10.1.1.1
server
192.168.30.10 dg blank
|
192.168.30.11 dg 192.168.30.10

To get the traffic from 10.1.1 to 192.168.30. you need to add a
static route to the gateway router.

192.168.30.0 255.255.255.0 10.1.1.2

If for some reason you can't add this to the gateway router you will
need to add it to every client in the 10.1.1 subnet which needs to access
the TS in 192.168.

"Alex" <Alex@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:89CBEFEF-2499-49A7-B5F3-EDA3B5796465@xxxxxxxxxxxxxxxx
This is (simplified) setup:

10.1.1.1 default gateway
|
HUB ----- 10.1.1.X - subnet with workgroup clients
|
10.1.1.2 as "external IP of SBS server
|
192.168.30.10 as internal IP of SBS server
|
HUB
|
192.168.30.11 Terminal server IP address

I know that setup is not very clever, but that is what I inherited and can
not change.
The question is how to allow trafic originating from 10.1.1.X subnet to
reach 192.168.30.11 (terminal server)

Regards,
Alex



.



Relevant Pages

  • Re: Physically Relocating An SBS box
    ... The VPN connection is a persistent link created by the Symantec Gateway ... Sytems 360 Router. ... > recommend letting the SBS server handle this and not the router. ...
    (microsoft.public.windows.server.sbs)
  • Re: Multihomed Server.
    ... It's the way ANY router, whether using Windows or a Cisco, is configured. ... There can only be ONE gateway. ... would you want your DC facing the internet directly? ...
    (microsoft.public.windows.server.networking)
  • Re: route trafic from external to internal adapter
    ... Routing is a two-way process. ... If the default gateway for 192.168.30.11 is to the RRAS router and the ... I have RRAS active on a SBS server and no firewall software I know of. ...
    (microsoft.public.windows.server.networking)
  • RE: SBS2003, DHCP, routers, internet, workstations, frustration
    ... As I know, if you point the gateway to the SBS server, there will be no ... impact on router firewall. ... point the gateway to the SBS server, so no client can access the internet. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS2003, DHCP, routers, internet, workstations, frustration
    ... > As I know, if you point the gateway to the SBS server, there will be no ... > impact on router firewall. ... > point the gateway to the SBS server, so no client can access the internet. ... > check "Enable folder view for FTP sites. ...
    (microsoft.public.windows.server.sbs)