VPN can't route to subnet

G

GY

Hi all,

My internal network is divided into 2 subnets (Subnet A: 192.168.0.0 ~
192.168.3.0 & Subnet B: 192.168.4.0 ~ 192.168.7.0). I have setup a RRAS
server, this server also work as a router between these 2 subnets. Its NICs
info as follows:

To internet - Real IP
To Subnet A - 192.168.1.2, 255.255.252.0, 192.168.1.2
To Subnet B - 192.168.4.2, 255.255.252.0, 192.168.4.2

This server serves internal clients well, they can travel between these 2
subnets. However, when I connect it from internal as a VPN client. My remote
computer can only go to subnet B. My remote computer is using:

192.168.1.x, 255.255.255.255, 192.168.1.x

It can ping 192.168.1.2, and all of the IPs in subnet B. It can't ping any
other IPs in subnet A. Can anyone advise me what to do?

Thanks a lot!!
 
H

Herb Martin

GY said:
Hi all,

My internal network is divided into 2 subnets (Subnet A: 192.168.0.0 ~
192.168.3.0 & Subnet B: 192.168.4.0 ~ 192.168.7.0). I have setup a RRAS
server, this server also work as a router between these 2 subnets. Its NICs
info as follows:

To internet - Real IP
To Subnet A - 192.168.1.2, 255.255.252.0, 192.168.1.2
To Subnet B - 192.168.4.2, 255.255.252.0, 192.168.4.2
Click to expand...

Is all of the above on the single RRAS router?

Are there ANY other routers (other than the ISP)
involved?
This server serves internal clients well, they can travel between these 2
subnets. However, when I connect it from internal as a VPN client. My remote
computer can only go to subnet B. My remote computer is using:
Click to expand...

"from internal as VPN client"???

Is this same RRAS server also the VPN server?

(I am looking for a 3rd router, ISP--RRAS---???)

If you have a 3rd router involved then the "middle"
router(s) must have static routes (unless you use
dynamic routing.)

[It's a rule.]
 
G

GY

There's no 3rd router & both RRAS & VPN is on the same server.

Herb Martin said:
GY said:
Hi all,

My internal network is divided into 2 subnets (Subnet A: 192.168.0.0 ~
192.168.3.0 & Subnet B: 192.168.4.0 ~ 192.168.7.0). I have setup a RRAS
server, this server also work as a router between these 2 subnets. Its NICs
info as follows:

To internet - Real IP
To Subnet A - 192.168.1.2, 255.255.252.0, 192.168.1.2
To Subnet B - 192.168.4.2, 255.255.252.0, 192.168.4.2
Click to expand...

Is all of the above on the single RRAS router?

Are there ANY other routers (other than the ISP)
involved?
This server serves internal clients well, they can travel between these 2
subnets. However, when I connect it from internal as a VPN client. My remote
computer can only go to subnet B. My remote computer is using:
Click to expand...

"from internal as VPN client"???

Is this same RRAS server also the VPN server?

(I am looking for a 3rd router, ISP--RRAS---???)

If you have a 3rd router involved then the "middle"
router(s) must have static routes (unless you use
dynamic routing.)

[It's a rule.]
192.168.1.x, 255.255.255.255, 192.168.1.x

It can ping 192.168.1.2, and all of the IPs in subnet B. It can't ping
any
other IPs in subnet A. Can anyone advise me what to do?

Thanks a lot!!
Click to expand...
Click to expand...
 
H

Herb Martin

GY said:
There's no 3rd router & both RRAS & VPN is on the same server.
Click to expand...

Ok, so when ping doesn't work (by address) you
try "Tracert" (unless you suspect a firewall is
blocking ICMP and even then tracert might show
you WHERE such a firewall is located.)

You should also try some "regular" (e.g., TCP or
UDP) connection like a web or DNS servers (by
address.)
Herb Martin said:
GY said:
Hi all,

My internal network is divided into 2 subnets (Subnet A: 192.168.0.0 ~
192.168.3.0 & Subnet B: 192.168.4.0 ~ 192.168.7.0). I have setup a RRAS
server, this server also work as a router between these 2 subnets. Its NICs
info as follows:

To internet - Real IP
To Subnet A - 192.168.1.2, 255.255.252.0, 192.168.1.2
To Subnet B - 192.168.4.2, 255.255.252.0, 192.168.4.2
Click to expand...

Is all of the above on the single RRAS router?

Are there ANY other routers (other than the ISP)
involved?
This server serves internal clients well, they can travel between these 2
subnets. However, when I connect it from internal as a VPN client. My remote
computer can only go to subnet B. My remote computer is using:
Click to expand...

"from internal as VPN client"???

Is this same RRAS server also the VPN server?

(I am looking for a 3rd router, ISP--RRAS---???)

If you have a 3rd router involved then the "middle"
router(s) must have static routes (unless you use
dynamic routing.)

[It's a rule.]
192.168.1.x, 255.255.255.255, 192.168.1.x

It can ping 192.168.1.2, and all of the IPs in subnet B. It can't ping
any
other IPs in subnet A. Can anyone advise me what to do?

Thanks a lot!!
Click to expand...
Click to expand...
Click to expand...
 
G

GY

Thanks Herb,

I've tried to use a standalone as a VPN server, it has two nics. One is
connected to internet directly w/ real IP, the other has been given a static
internal IP. It runs Windows 2003 server. It can ping the internal network,
but when there's a remote client connected through VPN. The internal nic
can't ping the internal network anymore. What happened?


Herb Martin said:
GY said:
There's no 3rd router & both RRAS & VPN is on the same server.
Click to expand...

Ok, so when ping doesn't work (by address) you
try "Tracert" (unless you suspect a firewall is
blocking ICMP and even then tracert might show
you WHERE such a firewall is located.)

You should also try some "regular" (e.g., TCP or
UDP) connection like a web or DNS servers (by
address.)
Herb Martin said:
Hi all,

My internal network is divided into 2 subnets (Subnet A: 192.168.0.0 ~
192.168.3.0 & Subnet B: 192.168.4.0 ~ 192.168.7.0). I have setup a
RRAS
server, this server also work as a router between these 2 subnets. Its
NICs
info as follows:

To internet - Real IP
To Subnet A - 192.168.1.2, 255.255.252.0, 192.168.1.2
To Subnet B - 192.168.4.2, 255.255.252.0, 192.168.4.2

Is all of the above on the single RRAS router?

Are there ANY other routers (other than the ISP)
involved?

This server serves internal clients well, they can travel between
these 2
subnets. However, when I connect it from internal as a VPN client. My
remote
computer can only go to subnet B. My remote computer is using:

"from internal as VPN client"???

Is this same RRAS server also the VPN server?

(I am looking for a 3rd router, ISP--RRAS---???)

If you have a 3rd router involved then the "middle"
router(s) must have static routes (unless you use
dynamic routing.)

[It's a rule.]

192.168.1.x, 255.255.255.255, 192.168.1.x

It can ping 192.168.1.2, and all of the IPs in subnet B. It can't ping
any
other IPs in subnet A. Can anyone advise me what to do?

Thanks a lot!!
Click to expand...
Click to expand...
Click to expand...
 
H

Herb Martin

GY said:
Thanks Herb,

I've tried to use a standalone as a VPN server, it has two nics. One is
connected to internet directly w/ real IP, the other has been given a static
internal IP. It runs Windows 2003 server. It can ping the internal network,
but when there's a remote client connected through VPN. The internal nic
can't ping the internal network anymore. What happened?
Click to expand...

"The internal nic can't ping the internal network"?????

The above is largely incompresible as a problem
report.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

RRAS doesn't R 4
VPN 2 questions 2
Best solution to segment subnets 8
Server 2008 RAS Only allowing clients to see local subnet 0
VPN and .192 subnet mask 2
3 Subnets and 1 VPN Server 9
Cannot get to all ip address over VPN 2
Multihomed Win2k Server Routing Issue 6

Top