Routing to a remote subnet

[Guest]

Hi
I have this network setup,

I have a windows 2000 multi-homed server running routing and remote access
which is connected to a draytek VPN router. I have a remote subnet 10.0.3.0
which is also behind another draytek router, and I have configured the
tunnel. I know the tunnel is working because I can ping and tracert to the
remote subnet 10.0.3.0 successfully from the windows 2000 multi-homed server.
However if I run a machine directly behind the windows 2000 multi-homed
server, and try to connect to the remote subnet from this, I am unsuccessful.
The ping times out. And the tracert returns the external IP address of the
draytek VPN router, when it should return the internal IP address. Can
anybody help?

Thanks
Colin

 

[Robert L [MS-MVP]]

you may need to enable ip routing on the server, this how to may help, http://www.howtonetworking.com/Networking/routing.htm

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I recommend Brinkster for web hosting!

Hi
I have this network setup,

I have a windows 2000 multi-homed server running routing and remote access
which is connected to a draytek VPN router. I have a remote subnet 10.0.3.0
which is also behind another draytek router, and I have configured the
tunnel. I know the tunnel is working because I can ping and tracert to the
remote subnet 10.0.3.0 successfully from the windows 2000 multi-homed server.
However if I run a machine directly behind the windows 2000 multi-homed
server, and try to connect to the remote subnet from this, I am unsuccessful.
The ping times out. And the tracert returns the external IP address of the
draytek VPN router, when it should return the internal IP address. Can
anybody help?

Thanks
Colin

 

[Guest]

Yes I have enabled IP routing and routing and remote access server, and still
I get the same result. What else could it be?

 

[Robert L [MS-MVP]]

use the pathping to find out where the traffic to go.
For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I recommend Brinkster for web hosting!

Yes I have enabled IP routing and routing and remote access server, and still
I get the same result. What else could it be?

 

[Guest]

do you mean traceroute. Im not sure pathping will tell me what I want!!!
If you do mean tracert Ive tried that. It keeps returning the external IP
address of the internet VPN router and it should return the internal IP
address of the internet VPN router. Do you know of anybody that could
perhaps help me out as Im at a loss and Ive tried almost everything?

 

[Bill Grant]

My guess is that the routing fails because the remote site doesn't know
where your local subnet is. Routing is a two way process, and you need
routes at both ends for it to work. Just because your server can reach a
remote subnet doesn't mean that the workstations behind it can!

What IP addresses do your workstations use? Does the remote Draytek have
a route to send these through the tunnel?

 

[Guest]

The IP addresses on the local subnet are 10.0.1.x addresses and yes. The
remote draytek router does have a route back to these addresses through the
tunnel. Would NAT or DNS cause problems? I am using a VPN PPTP tunnel for
routing purposes.

 

[Bill Grant]

Can you ping by IP address? If not, DNS won't make any difference. If
you can ping by IP but not by name, then DNS could be the problem.

 

[Guest]

no, not from 10.0.1.0 addresses, only from windows 2000 router which is
connected directly to the draytek gateway. When i trace from 10.0.1.0, it
doesnt reach the private side of the draytek gateway which is 192.168.2.254