vpn clients don't resolve names at work

B

bayers

I'm having trouble setting up a vpn.

At work we have a win2k server, service pack 4. It is our sole domain
server with directory services, dynamic dns, and an exchange 2000 server.

Many of our teachers have broadband at home and would like to access
services, like exchange/outlook2000 from home.

I've set up a ras server on the server, using the defaults.

Everyone can connect to the vpn without a problem. The problem comes when
you want to access exchange.

running 'tracert server', tracert doesn't use the vpn, instead, it goes out
looking for 'server' on the internet.

On our office network, we use dynamic dns and that works fine. I guess the
ras clients aren't using dynamic dns. I would like to get them to do so.

When I run ipconfig at home, I get:

PPP adapter Test:

Connection-specific DNS Suffix . : test.edu
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-05-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.10.10.202
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 10.10.10.202
DNS Servers . . . . . . . . . . . : 10.10.10.2
10.10.10.234
NetBIOS over Tcpip. . . . . . . . : Disabled

How can resolve names correctly while connected via vpn? My guess is that
clients have to use the 10.10.10.2 dns server at work to find pc names but
for some reason, it isn't working.

It's like the clients don't realize that there is a direct vpn connection
and they try to connect via the internet.
 
M

Miguel B.

Bayers,

Seems like you are running a little too much on one box,
but hey its your network.

Your issue falls on a route issue. The clients dont know
where to direct traffic for your VPN subnet (10.10.10.0
255.255.255.0).

You might have to add a temporary route on your client
first to test it out.

route ADD 10.1.10.0 MASK 255.255.0.0 157.55.80.1
destination^ ^mask ^gateway


You do need to have your networks DNS server as the
secondary server.

Regards,

Miguel B.
 
B

Bill Grant

It really depends on your name resolution. If a machine or service name
resolves to an IP address in the private range, the traffic will be routed
through the VPN. But if it resolves to a public IP, the traffic will be
routed through the Internet.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top