Static routes for VPN Clients



I need some help with RRAS VPN clients and their static routes.

I have 2 networks
Network A
Network B

Router on Network A IP is
Router on Network B IP is

RRAS Server IP

Currently I have RRAS configured to allow PPTP clients access
configured on a Windows 2000 server located on Network A. IP
addresses are handed out to the clients via DHCP server not a set

When I connect to Network A using vpn client I can gain access to
anything and everything on Network A. However I cannot gain access to
anything on Network B.

If I add the following to my route tables on my VPN Client
route add mask
route add mask

I am then able to gain access to both Network A and B.

I cannot seem to find a way to push those routes to the VPN client
when they log in. I tried adding it to the apply static route under
the Dial in tab in active directory but that did not seem to do
anything. I tried to add it in the Static route section of the RRAS
msc but that did not seem to do anything either. I know I am missing
something really simple but I just do not know what it is.

Could someone here please help.


Priya Raghavan [MSFT]

Your RRAS Server should have 2 interfaces: 1 for the Network A and another
for Network B. Only then client which VPN into the RAS Server can contact
machines in the Network B.

As per the below info, the RRAS Server seems to have only 1 interface and
that is in Network A.

BTW, which network is your client on? (Because by modifying the routes on
the client, you are able to access Network A and B)

Dinesh Agarwal \(MSFT\)

You can use Connection Manager client to solve this problem. For more
information you can look at:

It has a specific section on updating route table -

Note that routing table update feature was added only with CMAK 1.3 which
ships with WS03. The CM profile created from CMAK 1.3 can, however, be
installed on Win2000, winxp, win9x.

Hope this helps,

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question