Routing Problem

[Kevin]

I have a tri-homed Windows 2000 Server (running ISA server) setup as
follows:-

LAN - 192.168.0.0
DMZ - 172.16.0.0
External IP - x.x.x.x

I have specified that addresses should be allocated from a static
address pool within Routing and Remote Access, i do not have DHCP
installed on the server.

The problem i have is relating to routes on the client. If the client
is given an address with the 172.16.0.0 range, it can only access the
DMZ, and if it is given an IP in the 192.168.0.0 range, it can only
access the LAN. In either scenario, if i add a static route to the
'other' network on the client then i can access both networks without
problems.

In the config of the VPN on the client i have de-selected 'Use default
gateway on remote network'.

Is there a way that the routes on the client can be updated to include
both internal networks?

Many Thanks

Kevin

 

[Bill Grant]

If you clear the "use default gateway .. " setting on the client, you
only get a subnet route through the LAN for the subnet of the "received" IP
address (as you have discovered). See MS KB 254231 for details. You need to
add extra routing on the client to send traffic for the "other" subnet
through the tunnel. Otherwise the traffic goes out to the Internet and is
lost. If you have a lot of remote clients, you can use CMAK to configure
their remote connection properties.