Routing on dual homed VPN server

X

xasdfg123456

Hi, I am trying to setup a VPN/PPTP server with two NICs (the 192
address will eventually go live with a public IP). Here is the setup:

eth0/internal
IP Address: 10.1.1.90
Netmask: 255.255.255.0
Gateway:

eth1/external
IP Address: 192.168.0.90
Netmask: 255.255.255.0
Gateway: 192.168.0.1

Network connectivity is fine until I run the Wizard and enable Routing
and Remote Access, then I get network unreachable when trying to ping
192.168.0.1. But the routing table is identical to what it was before
I enabled Routing and Remote Access:

Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.90
1
10.1.1.0 255.255.255.0 10.1.1.16 10.1.1.16
1
10.1.1.16 255.255.255.255 127.0.0.1 127.0.0.1
1
10.255.255.255 255.255.255.255 10.1.1.16 10.1.1.16
1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1
1
192.168.0.0 255.255.255.0 192.168.0.90 192.168.0.90
1
192.168.0.90 255.255.255.255 127.0.0.1 127.0.0.1
1
192.168.0.255 255.255.255.255 192.168.0.90 192.168.0.90
1
224.0.0.0 224.0.0.0 10.1.1.16 10.1.1.16
1
224.0.0.0 224.0.0.0 192.168.0.90 192.168.0.90
1
255.255.255.255 255.255.255.255 10.1.1.16 10.1.1.16
1
Default Gateway: 192.168.0.1
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
10.1.1.0 255.255.255.0 10.1.1.16 1

Why can't I reach 192.168.0.1? Thanks.

Bill
 
P

Phillip Windell

X

xasdfg123456

Phillip Windell said:
Compare what you did to these. The articles are different, they describe
two different "models",...you have to use what applies to your situation.

Virtual Private Networking with Windows 2000: Deploying Router-to-Router
VPNs
http://www.microsoft.com/windows2000/server/evaluation/features/deplyr2rvpn.asp

Virtual Private Networking with Windows 2000: Deploying Remote Access VPNs
http://www.microsoft.com/windows2000/techinfo/planning/incremental/vpndeploy.asp

Thanks. It was working, the Wizard just turns on filtering rules:

2. Next, you are prompted to select the interface that is connected to
the Internet. If the VPN server is not connected to the Internet, you
can select <No Internet connection>. The interface that you select
will be automatically configured with packet filters that allow only
PPTP and L2TP-related traffic. All other traffic is silently
discarded. For example, you will no longer be able to ping the
Internet interface of the VPN server. If you want to use the VPN
server computer as a network address translator (NAT), Web server, or
other function, see Appendix B.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top