Software VPN connection problems

[Guest]

Hello all,

We use RAS on a Windows 2000 Server to establish a VPN connection to a
Windows XP SP2 computer. The XP machine has two IP's one is it's internal
lan IP, and the other is the IP of it's VPN connection. ie The Local shops
Ip addresses are 10.2.6.x, the XP system uses 10.2.6.1 as it's static IP and
it's VPN PPP connection IP is 10.200.6.1.
We can connect to the computer from the server and other company desktops
using the 10.200.6.1 IP but not the 10.2.6.1 IP, and we would like to be able
to use the 10.2.6.1 address for system management.

All the ports that we require through the XP firewall are open, but we are
still not able to connect. Is there something that we might be missing or
maybe a fix for this?
I would like to hear from anyone who also has a set up something like this.

Thank you,
David Hetherington

 

[Chris Priede]

Hi,

Is there something that we might be missing or maybe a fix for this?

Yes. You are missing routing.

It's difficult to give a specific recipe without seeing routing tables and a
network diagram, but at the very least, you would need the VPN gateway
machine routing packets destined for the remote LAN address to the remote
VPN endpoint:

route add 10.2.6.1 mask 255.255.255.255 10.200.6.1

Depending on your network, you may also need:

1) a similar route on your local network's default gateway (which might be a
router or a firewall appliance) -- to get packets from other machines,
destined 10.2.6.1, to your VPN gateway;

2) a route back to your local network, on the remote machine.

 

[Guest]

Sorry, I guess that is the one thing that I forgot to mention in the Post, we
do have the correct routing set up. If we turn off the Window XP Firewall we
can connect through the 10.2.6.1 IP.

But thanks Chris.