Is default gateway my routing problem?

[Dave Pratt]

I have bloodied my head and the wall at this point. Need
some insight regarding default gateway and static route
settings on this config.

I have:
Win2K RRAS server with two NICs config'd as:
Intranet
IP 192.168.51.61
SM 255.255.255.0
GW 192.168.51.1
and,
External
IP 65.205.212.67
SM 255.255.255.224
GW 65.205.212.65

I ran the RRAS Wizard and installed the VPN server
option. Installed protocol is only TCP/IP, and the
Internet connection is on the External NIC. VPN Client IP
addresses come from static pool in the 192.168.52.0
subnet. No Radius. All clients are Win2K, and all
network resources are Win2K Server. I know the VPN works
through the firewall as I have been able to connect,
authenticate, and browse network resources.

I configured two static routes pointing to subnets located
across the WAN (192.168.1.0/24 and 192.168.101.0/24).
This also works.

Here's the catch. I cannot access the internet while the
VPN is activated on the client unless I disable the
client's "Use Default Gateway on Remote Network" feature
under Advanced TCPIP Networking for the VPN connection.
When I do that, the internet works great but the client
loses access to all LAN subnets (.1, .51, and .101). Not
ideal.

If I try to put a default route in the static list
pointing everything to 51.1, then I can't even connect to
the VPN server at all. ARGGGHHH!!!

So, question is, how should I configure the default
gateway settings for the two network interfaces? And, how
do I configure the routing table to support simultaneous
access to the various LAN subnets AND allow access to the
internet?

 

[Dave Pratt]

Update and clarification to orginal post.
1. There is NO default gateway on the Intranet interface.
2. What I really would like to know how to do, since
routing to the entire internal LAN works fine, is enable
internet access to the VPN client through the VPN.
Thanks!

 

[Robert L [MS-MVP]]

post routing table will help.

--
For more and other information, go to
http://www25.brinkster.com/ChicagoTech

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Windows & Network Support, Tips and FAQs on
http://www25.brinkster.com/ChicagoTech
This posting is provided "AS IS" with no warranties.