VPN routing with W2K RRAS

[Robert Moody]

I have tried looking through this newsgroup to no avail. I am trying
to set up a W2k server to act as a router for a home office and connect to
corporate office. Most of it work right but some does not .

I can connect from the W2K server to the internet and the corp network and
all servers OK

The laptop in the 172.30.16.0 network connects to the internet OK

The laptop cannot ping anything on the corp network. I can ping
172.20.10.143 the address
assigned by the PPTP server the the VPN connection. I cannot ping
172.20.10.29 the
PPTP server LAN nic.

Any help will be appreciated

Here is my configuration


172.20.10.3 172.20.10.4
Server A | | Server B
| |
-------------------------
|
| 172.20.10.0 network
|
------------------------------
| 172.20.10.29 NIC1 | ---------------
| PPTP server |--------- | 172.20.10.243 |
| 69.x.x.x NIC2 | | |
------------------------------ | |
| | |
| Internet | |
| | |
----------------- | Demand Dial |
| 24.X.X.X | | VPN |
| Cable modem | | Configured |
| 10.1.1.1| | On W2K server|
----------------- | |
| | |
| 10.1.1.0 Network | |
| | |
---------------------- | |
| 10.1.1.45 NIC1 | | |
| W2K Server |----------------| 172.30.16.200 |
| 172.30.16.1 Nic2 | ---------------
----------------------
|
| 172.30.16.0 network
|
172.30.16.10
Laptop





Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.1.1.1 10.1.1.45 1
10.1.1.0 255.255.255.0 10.1.1.45 10.1.1.45 1
10.1.1.45 255.255.255.255 127.0.0.1 127.0.0.1 1
10.255.255.255 255.255.255.255 10.1.1.45 10.1.1.45 1
69.xx.xx.xxx 255.255.255.255 10.1.1.1 10.1.1.45 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
172.20.10.0 255.255.255.0 172.20.10.29 172.20.10.243 1
172.20.10.29 255.255.255.255 172.20.10.243 172.20.10.243 1
172.20.10.243 255.255.255.255 127.0.0.1 127.0.0.1 1
172.20.255.255 255.255.255.255 172.20.10.243 172.20.10.243 1
172.30.16.0 255.255.255.0 172.30.16.1 172.30.16.1 1
172.30.16.1 255.255.255.255 127.0.0.1 127.0.0.1 1
172.30.16.200 255.255.255.255 127.0.0.1 127.0.0.1 1
172.30.255.255 255.255.255.255 172.30.16.1 172.30.16.1 1
224.0.0.0 224.0.0.0 10.1.1.45 10.1.1.45 1
224.0.0.0 224.0.0.0 172.20.10.243 172.20.10.243 1
224.0.0.0 224.0.0.0 172.30.16.1 172.30.16.1 1
255.255.255.255 255.255.255.255 10.1.1.45 10.1.1.45 1
Default Gateway: 10.1.1.1
===========================================================================
Persistent Routes:
None

 

[Guest]

You need to have your Home office 2000 Server set up with RRAS. Here is a good discussion with some links to articles:

http://www.microsoft.com/technet/community/chats/trans/network/vpn1120.mspx

Please continue to post your questions.

Ian bagnald
MCSE:Security W2K
MCSA:Security W2K
COMPTIA A+

 

[Guest]

Be sure to configure a static route to your corporate network.

Ian Bagnald

Use destination:

 

[Guest]

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/networking/vpndpls2.mspx

This article is good aswell.

 

[Bill Grant]

A connection like this will not route between the two sites. The
corporate server will only route traffic back to its client (ie your home
server). To route to traffic behind that machine, you need to set up a
router to router VPN link.

With a router to router link, each router has the routing info it needs
to send traffic for the "other" site through the VPN link. The link works
like a slow IP router between the two sites, because each router has a route
to the other site's IP subnet through the connection.