How to see my shared resources behind NAT RRAS Win2KS

[ElGusano]

Hi,
I have my net like this:
=========================================
sub-net
10.0.0.0
|
|
router"A" w2ks
dns, dhcp, wins, rras nat
10.0.0.1
192.168.2.2
|
| ------ sub-net 192.168.2.0
router"B"/firewall
192.168.2.1
ISP(internet)
|
|
public net
=========================================

0. I want to see my shared resources in sub-net 10.0.0.0 using pc's
from sub-net 192.168.2.0. It doesn't matter if using IP#s or HostNames.

FYI
1. I can see shared resources in sub-net 192.168.2.0 from sub-net
10.0.0.0 using IP#s.
2. Router"A" can see both sub-nets and shared resources.
3. I have internet access from both sub-nets.
4. I have IPSec in router"A" passing fileshare, icmp, http, ftp, and
others.
5. Router"A" is also a NAT RRAS.
6. No problem in router"B" passing http, ftp, vpn and others.

Thanks for your time and please let me know if it is posible to do this
with this configuration or I have to use a proxy server.
Anyways I am very cheap and I usually don't expend any money doing my
homework so please if you know a cleap solution, I mean cero dolores
solution let me know.

Thanks again,

 

[Doug Sherman [MVP]]

Well, does "router"B"/firewall" support static routes? If so, and you want
to share files between these subnets; there is no obvious reason for RRAS
NAT - use LAN routing instead.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

 

[ElGusano]

Hi Doug,
Well as you can see I am using NAT funtions in router A, and is just
for security, I mean is another wall of protection. Well I think the
problem is not with router B and yes this router know that there is
another router A becouse I create a static route. Anyways as you can
see my problem is with router A. If you notice, I have access to
sub-net 192.168.2. using a computer with ip of sub-net 10.0.0. As you
can see my NAT is translating packets from 10 to 192 but not the other
way around. Maybe I need to open other ports besides 137,138,139,445 in
my IPSec policy in router A or change settings in RRAS NAT in order to
pass data from 192. to 10. sub-nets.

Anyways I think I found my way around this problem, I am working in it
and I'll let you know if it works.

The solution is use another NIC in any computer in sub-net 10. and set
a static IP for it with sub-net 192. Also in order for this to work I
am going to disable DHCP in router B and let router A to do the work of
DHCP so I can do the correct assigments of servers and other.

Ok, Thank you for your idea and Buena Suerte, bye.