NAT question - cant ping the private interface

[Bart]

Hi,

I have a 192.168.1.0 network.
There is a dsl router with 192.168.0.99.

I use win2003 server as NAT box.
So the setupis simple.

Lan1 - connected to the router
ip 192.168.0.254
sun 255.255.255.0
gw 192.168.0.99

and is used as public interface.

Lan2
ip 192.168.0.253
sun 255.255.255.0
gw no gateway

and is used and private interface in RAS.

Now all work stations use the 192.168.0.253 as default gateway.
Everything works fine, but there is one thing that bothers me.

Why none of the stations can ping the private interface.
I really need that.

Any ideas???
Is this a by design or my fault?


Bartosz Wegrzyn

 

[Steve Duff [MVP]]

I do not know the cause of the ping problem, but you should not
normally configure two NICs on the same network on the same
system.

It doesn't ususally get what you want, and it will generally cause
unexpected problems. ICMP redirects may cause workstations to
start using 0.99 directly for example. And multihoming a server on
the same network has all sorts of unpleasant implications. I'm honestly
a little surprised it works at all.

Move the public interface to a 192.168.1.x network, make sure the networks
are not switched together, and let routing/NAT on
the 2003 server move data between those two networks.

Steve Duff, MCSE, MVP
Ergodic Systems, Inc.

 

[Bart]

The problem is that I have to have that kind of setup because my
servers connect to the 192.168.40.99 router directly. II created this
kind of setup because the router (firewall) can accept only 10
connections. So to work around I put the NAT box for all my
workstations. But the servers still use the 99 router.

Probably I will have to set separate subnet for my workstations.
But, also I dont want to route all packets through the nat box. (like
for file serving)

I had that kind of setup and it worked.

Thanks

 

[Bart]

I did move the public interface to differnet network.
Same problem.
There is no wayto access the private interface from inside, but the
router is able to route the internet packets.
When I start the server the thing works work 1-2 minutes and then
stops.
Also when I remove the NAT, it works fine.
I can ping both networks without any problems.
When I start the nat the problem appears again.

Bart,