RAS Rounting, can not access entire network

  • Thread starter Thread starter Craig Grell
  • Start date Start date
C

Craig Grell

I have a Windows 2000 Server setup as a VPN server. The server has a single
nic and is behind the firewall

Firewall internal (192.168.154.1)

Windows 2000 Server VPN (192.168.154.22)
VPN Static address pool (192.168.154.23 - 192.168.154.60)
Windows 2000 Server File (192.168.154.99)

Clients can connect and access the VPN server.

Clients can not access any other servers on the network

When I try to ping using an IP address of a different server I get the
following

Pinging 192.168.154.99 with 32 bytes of data:

Reply from 192.168.154.23: Destination host unreachable.

On the client the details for the VPN connection says

Server IP address = 192.168.154.23
Client IP address = 192.168.154.24

What am I missing so that the VPN client can access the entire network?

Thank you
 
Ensure that the windows VPN Access server has all the
routing information.
Check for the access permissions in the config of the user
( the windows VPN policy). Usually not all users are give
access to the entire subnet/s.
If you are in a pure AD domain ( native not mixed) you can
allocate static IP based on user id. Check for permissions
on the ACLs in between.

Hope that helps
Mad
 
Back
Top