RE: Re: OT: Win2003 Routing/VPN Issue

["Dean Smith" <ukha@xxxxxxx>]

Chris

I'm not a VPN or MS expert but do play with routing a fair bit. To me its
sounds more like a missing route issue than a subnet mask. - If you have
network cards in both 192.168.1.x and 192.168.2.x and were to set the mask
on both to 255.255.0.0 - effectivley the cards are in the same subnet and
that's only going to make things worse.

Is the VPN server the only Device routing between the 192.168.1 and
192.168.2 subnets (for normal devices) or is there other infrastructure
doing that ?

Can Non VPN Devices on 192.168.2.x can ping devices on 192.168.1.x ? (other
than the server itself)

Can the VPN Client ping ....
The VPN server on its 192.168.2.x address ?
The VPN server on its 192.168.1.x address ?
Other Devices on 192.168.2.x ?
Other Devices on 192.168.1.x ?
anything! ?

Dean


-----Original Message-----
From: Chris Bond [mailto:chris@xxxxxxx]
Sent: 25 November 2003 13:47
To: ukha_d@xxxxxxx
Subject: [ukha_d] Re: OT: Win2003 Routing/VPN Issue


> What is the DHCP pool ? (is it on the 192.168.2 segment)

The DHCP is on the 192.168.2 segment - its not handled by the same
server another server on 192.168.2.2 handle the DHCP requests.  The
scope options are:

Router 192.168.2.254
Nameservers 192.168.2.2
DNS 192.168.2.2

I've tried it both way from the client im connecting of not
overriding the default gateway and with it overriding default gw.
Still the same.

> If that segment is used only for VPN clients why have you got a
Netwrok card
> for it ?

192.168.1.x and 192.168.2.x are both phystically seperate networks.
But for example on 192.168.2.x segment we want to be able to get to
the 192.168.1.x segment for a Citrix Server amongst other things.

> What is the default gateway for the devices on the 192.168.1.x
subnet ? If
> its anything other than the VPN server, do those devices have
static routes
> for the 192.168.2.x subnet via the VPN server ?

The Default gateway for devices on 192.168.1.x segment is nothing on
the vpn server as it has full access to servers on the server
itself.  Its only when you connect via the VPN connection you are no
longer able to get to the 192.168.1.x segment.

Kind Regards,
Chris Bond



UKHA 2004: 15th and 16th May 2004

http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/