Win2000Server multiple ddial VPN outbound connections & internal LAN

[S c o t t K r a m e r]

Hello:

We use a single server to connect to 20+ VPN sites simultaneously--- actual
ipconfig is at the end of this post:

To access all these networks we added static routes (that initiate the
demanddial interface) exampe: 10.10.110.0, 255.255.255.0 will connect that
network...

This works great actually! So peaple actually terminal service in this
server to access all the client sites...


Questions is, these networks are available only on that server, not the rest
of our internal lan...
How can we provide these to our internal network? is there a way using
routes, NAT, proxy type things, etc??



Thanks!!
Scott Kramer




Windows 2000 IP Configuration

Ethernet adapter INT:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.30.50
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :

Ethernet adapter EXT:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.33.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.33.9

PPP adapter {668022CE-DDC3-487D-989C-0F3BB9490FF5}:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.30.181
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :

PPP adapter {9501F01F-6A9D-4D0C-9117-759C13D5E424}:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.40.83
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :

PPP adapter {264DA351-9790-4B74-8FDB-5D6B05BD11D8}:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.0.59
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :

PPP adapter {FD1314BD-E556-43F0-A3DC-AE2630E77285}:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 10.10.110.79
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :

...... continues

 

[Bill Grant]

That should work OK. You should be able to route throught the VPN
server itself. Is it enabled for LAN routing?

The other thing to consider is default routing. What is the default
gateway of the LAN clients? If it is not the VPN server, you need some way
to redirect traffic for the remote sites to the VPN server.

You will also need to check the routing at each site. Does it have
sufficient routing info to route traffic for your "home" LAN through the VPN
link (such as a subnet route).