Problems connecting to another 2000 server

[macheesemo]

Hey everyone, first post. Can't seem to figure this one out; any help
would be appreciated.

We have a network running Windows 2000 servers. We're putting in some
Linksys RV042 routers (so some IPs have changed) and creating VPNs. The
servers are now all using the new routers and are able to talk back and
forth, but the problem is with 2 particular servers not being able to
communicate, kind of...

We've successfully established a VPN tunnel between 2 servers (let's
call them Server A and Server B). Server A can't ping Server B's IP or
gateway, but Server B can pink Server A's gateway but not A's IP. I can
log into Server A and remotely login to Server C, D, E, etc. and
remotely login from that server to Server B, and vice versa (B to
another, another to A). When I do a tracert's from Server A to Server B
using the B's server and gateway's IP addresses, nothing. Doesn't even
hit its own gateway. When I try tracert from Server B to Server A, it
cops out after hitting its own gateway.

I'm thinking there's an issue with Server A's firewall or permissions
settings, but what? I'm guessing this in part because of the "Remote
host unavailable" message when pinging Server A from B. Any ideas or
suggestions?

 

[bboyce]

it sounds to me like it's a router issue and not a server issue but
I've been known to be wrong. Are C, D, or E connected to the same
router as A or B or both. I don't know much about these routers but is
there a way you could copy and paste the basic config here for a look
see. Another thing to check would be the firewall make sure it allows
ICMP echo thats the ping and if it's disable you won't be able to ping
it.

 

[macheesemo]

All of the servers are on different subnets at different locations
throughout the town, so they all have their own routers.

The basic config of Server A's router looks like this:

LAN IP : 192.168.213.254
WAN IP : 142.28.187.66
DMZ IP : 0.0.0.0
Mode : Gateway
DNS : 192.168.204.1 192.168.213.1
DDNS : Off
DMZ Host : Disabled

The basic config of Server B's router looks like this:

LAN IP : 192.168.216.254
WAN IP : 142.28.180.195
DMZ IP : 0.0.0.0
Mode : Gateway
DNS : 192.168.204.1 192.168.216.1
DDNS : Off
DMZ Host : Disabled

(192.168.204.1 is out AD server).

The tunnel from A to B looks like this:

Phase2 Enc/Auth/Grp: 3DES/MD5/1
Local Group: 192.168.213.0
255.255.255.0
Remote Group: 192.168.216.0
255.255.255.0
Remote Gateway: 142.28.180.195

The tunnel from A to B looks like this:

Phase2 Enc/Auth/Grp: 3DES/MD5/1
Local Group: 192.168.216.0
255.255.255.0
Remote Group: 192.168.213.0
255.255.255.0
Remote Gateway: 142.28.187.66

The tunnels from either end are able to connect. I can disconnect and
reconnect at will.

Regarding checking the firewall, I can ping any server from Server B
except Server A, but can ping A's gateway (192.168.213.254). From
Server A I can ping any server, but can't get a reply from B's IP
(192.168.216.1) or gateway (192.168.216.254).