CMAK, Windows XP, and NT4 RAS

A

Ashe

I have just started at a new company that is using NT4 RAS for its vpn
solution (not Routing and Remote access, just the base NT4 RAS).
I will upgrade it, but not yet.

We are not using "Use default gateway on remote network", and have several
different private subnets. I have used CMAK to create a profile, and, to
create a routing update file per the docs. I have used "default" for the
parameters, also per the docs.

I can connect to the server with no problems, but, my routing table is not
updating they way the docs indicate they should. The routes are added, but
to the original (lan) interface, not to the vpn interface.

Does this feature of CMAK require a newer server?

D
 
R

Robert L [MS-MVP]

not sure the issue. posting the routing table may help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
I have just started at a new company that is using NT4 RAS for its vpn
solution (not Routing and Remote access, just the base NT4 RAS).
I will upgrade it, but not yet.

We are not using "Use default gateway on remote network", and have several
different private subnets. I have used CMAK to create a profile, and, to
create a routing update file per the docs. I have used "default" for the
parameters, also per the docs.

I can connect to the server with no problems, but, my routing table is not
updating they way the docs indicate they should. The routes are added, but
to the original (lan) interface, not to the vpn interface.

Does this feature of CMAK require a newer server?

D
 
A

Ashe

Output of route print, no vpn:
C:\Documents and Settings\David>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 90 4b 5d 1e d2 ...... HP WLAN 54g W450 Network Adapter - Packet Schedu
ler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 30
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.100 192.168.1.100 30
192.168.1.100 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.1.255 255.255.255.255 192.168.1.100 192.168.1.100 30
224.0.0.0 240.0.0.0 192.168.1.100 192.168.1.100 30
255.255.255.255 255.255.255.255 192.168.1.100 192.168.1.100 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None

Route Update File,
add 192.168.99.0 mask 255.255.255.0 default METRIC default IF default
add 192.168.88.0 mask 255.255.255.0 default METRIC default IF default

Route table after VPN connection:
C:\Documents and Settings\David>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 90 4b 5d 1e d2 ...... HP WLAN 54g W450 Network Adapter - Packet Schedu
ler Miniport
0x40004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 30
XX.XX.208.52 255.255.255.255 192.168.1.1 192.168.1.100 30
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.100 192.168.1.100 30
192.168.1.100 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.1.255 255.255.255.255 192.168.1.100 192.168.1.100 30
192.168.77.0 255.255.255.0 192.168.77.202 192.168.77.202 1
192.168.77.202 255.255.255.255 127.0.0.1 127.0.0.1 50
192.168.77.255 255.255.255.255 192.168.77.202 192.168.77.202 50
192.168.88.0 255.255.255.0 192.168.1.1 192.168.1.100 30
192.168.99.0 255.255.255.0 192.168.1.1 192.168.1.100 30
224.0.0.0 240.0.0.0 192.168.1.100 192.168.1.100 30
224.0.0.0 240.0.0.0 192.168.77.202 192.168.77.202 50
255.255.255.255 255.255.255.255 192.168.1.100 192.168.1.100 1
255.255.255.255 255.255.255.255 192.168.77.202 192.168.77.202 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None

Working routes using "route add" look like this:
192.168.88.0 255.255.255.0 192.168.77.202 192.168.77.202 30
192.168.99.0 255.255.255.0 192.168.77.202 192.168.77.202 30

It looks like the routing table update file is taking the gateway and interface values from the default interface values
instead of from the vpn interface values. This contrary to the docs.

D
not sure the issue. posting the routing table may help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
I have just started at a new company that is using NT4 RAS for its vpn
solution (not Routing and Remote access, just the base NT4 RAS).
I will upgrade it, but not yet.

We are not using "Use default gateway on remote network", and have several
different private subnets. I have used CMAK to create a profile, and, to
create a routing update file per the docs. I have used "default" for the
parameters, also per the docs.

I can connect to the server with no problems, but, my routing table is not
updating they way the docs indicate they should. The routes are added, but
to the original (lan) interface, not to the vpn interface.

Does this feature of CMAK require a newer server?

D
 
D

David Ashe

Anyone?
Is there something in Connection Manager that *requires* Win2k or above on the server end?

D
Output of route print, no vpn:
C:\Documents and Settings\David>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 90 4b 5d 1e d2 ...... HP WLAN 54g W450 Network Adapter - Packet Schedu
ler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 30
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.100 192.168.1.100 30
192.168.1.100 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.1.255 255.255.255.255 192.168.1.100 192.168.1.100 30
224.0.0.0 240.0.0.0 192.168.1.100 192.168.1.100 30
255.255.255.255 255.255.255.255 192.168.1.100 192.168.1.100 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None

Route Update File,
add 192.168.99.0 mask 255.255.255.0 default METRIC default IF default
add 192.168.88.0 mask 255.255.255.0 default METRIC default IF default

Route table after VPN connection:
C:\Documents and Settings\David>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 90 4b 5d 1e d2 ...... HP WLAN 54g W450 Network Adapter - Packet Schedu
ler Miniport
0x40004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 30
XX.XX.208.52 255.255.255.255 192.168.1.1 192.168.1.100 30
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.100 192.168.1.100 30
192.168.1.100 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.1.255 255.255.255.255 192.168.1.100 192.168.1.100 30
192.168.77.0 255.255.255.0 192.168.77.202 192.168.77.202 1
192.168.77.202 255.255.255.255 127.0.0.1 127.0.0.1 50
192.168.77.255 255.255.255.255 192.168.77.202 192.168.77.202 50
192.168.88.0 255.255.255.0 192.168.1.1 192.168.1.100 30
192.168.99.0 255.255.255.0 192.168.1.1 192.168.1.100 30
224.0.0.0 240.0.0.0 192.168.1.100 192.168.1.100 30
224.0.0.0 240.0.0.0 192.168.77.202 192.168.77.202 50
255.255.255.255 255.255.255.255 192.168.1.100 192.168.1.100 1
255.255.255.255 255.255.255.255 192.168.77.202 192.168.77.202 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None

Working routes using "route add" look like this:
192.168.88.0 255.255.255.0 192.168.77.202 192.168.77.202 30
192.168.99.0 255.255.255.0 192.168.77.202 192.168.77.202 30

It looks like the routing table update file is taking the gateway and interface values from the default interface values
instead of from the vpn interface values. This contrary to the docs.

D
not sure the issue. posting the routing table may help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
I have just started at a new company that is using NT4 RAS for its vpn
solution (not Routing and Remote access, just the base NT4 RAS).
I will upgrade it, but not yet.

We are not using "Use default gateway on remote network", and have several
different private subnets. I have used CMAK to create a profile, and, to
create a routing update file per the docs. I have used "default" for the
parameters, also per the docs.

I can connect to the server with no problems, but, my routing table is not
updating they way the docs indicate they should. The routes are added, but
to the original (lan) interface, not to the vpn interface.

Does this feature of CMAK require a newer server?

D
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top