Routing to external networks

[Ian Hutcherson]

I have a problem with our RRAS server.

Server: Win2K Server, fully up to date. Attached to our network and
working fine, including dial-up access for remote workers.

We also have an Watchguard Firewall in place on our network that
controls VPN's to customer sites.

One site, has two VPN tunnels to seperate subnets (two locations -
BodyShop and HeadOffice). These have been in place for over a year,
and are working fine. The VPN's both go through a firewall appliance
at the bodyshop location, which is then routed through a seperate
router to the headoffice location (or other locations that we don't
support).

We can connect from our internal network to servers at both of the
customer locations. however we now need to connect one of our remote
workers (who still use dialup access rather then a client VPN) to some
servers in the head office location. But they can't seem to do this.

In testing, it appears that we can not connect from our RRAS server
either, whilst all other machines on our network are working OK.

Now the strange bit. If I stop the RRAS services, then our RRAS server
can then connect to the customer's server, but of course our dialup
clients can not connect.

I have checked for any conflicting routing entries, both in the RRAS
MMC and in the registry - nothing found.
Anyone any ideas???


Thanks in advance.



Ian Hutcherson

 

[Robert L [MS-MVP]]

this is routing issue. this example may help. quoted from
http://www.howtonetworking.com/routing.htm:

One router goes to the corporation email server and another one goes to the
Internet

Symptoms: you have one router connecting to the corporation for email and
the Internet access. However, the corporate Proxy server filters web sites
and watches you access. Then, you add another router for the Internet access
and want to use the corporate router for the email only, but the traffic
always go to the corporation router.

Resolution: You need to modify the routing table. Make all traffic go to the
Internet and point the email server to the corporation ip range.


--
For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.