VPN Routing problem

[Mamun]

Hi, I have a win2k server configured as VPN gateway. The
IP addresses are External --->172.16.3.10 and Internal----

192.168.1.10.

My lan design is Internet--Pix--VPNBox--1stLAN-2nd LAN

My internal network is subnetted by a router. now I want
my vpn users to route the other subnet which is 10.10.2.1.
How can I do that?

~M$

 

[Bill Grant]

Basically, you just need enough routing info in both directions! Default
routing falls down when multiple routers are involved.

Unless you have cleared the "Use default gateway .. " box on the client,
routing will be OK on the clients. They send everything to the VPN server.

Can you route between the 192.168 and the 10.10 subnets? If you can,
routing going "forward" is probably OK. The most likely problem is that the
10.10 subnet has no idea where the 172.16 subnet is. The router between
these two LAN subnets needs to know that it can reach the 172.16 subnet via
the VPN server. That is, it needs to forward 172.16 traffic to 192.168.1.10
..