Routing on dual homed VPN server

  • Thread starter Thread starter xasdfg123456
  • Start date Start date
X

xasdfg123456

Hi, I am trying to setup a VPN/PPTP server with two NICs (the 192
address will eventually go live with a public IP). Here is the setup:

eth0/internal
IP Address: 10.1.1.90
Netmask: 255.255.255.0
Gateway:

eth1/external
IP Address: 192.168.0.90
Netmask: 255.255.255.0
Gateway: 192.168.0.1

Network connectivity is fine until I run the Wizard and enable Routing
and Remote Access, then I get network unreachable when trying to ping
192.168.0.1. But the routing table is identical to what it was before
I enabled Routing and Remote Access:

Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.90
1
10.1.1.0 255.255.255.0 10.1.1.16 10.1.1.16
1
10.1.1.16 255.255.255.255 127.0.0.1 127.0.0.1
1
10.255.255.255 255.255.255.255 10.1.1.16 10.1.1.16
1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1
1
192.168.0.0 255.255.255.0 192.168.0.90 192.168.0.90
1
192.168.0.90 255.255.255.255 127.0.0.1 127.0.0.1
1
192.168.0.255 255.255.255.255 192.168.0.90 192.168.0.90
1
224.0.0.0 224.0.0.0 10.1.1.16 10.1.1.16
1
224.0.0.0 224.0.0.0 192.168.0.90 192.168.0.90
1
255.255.255.255 255.255.255.255 10.1.1.16 10.1.1.16
1
Default Gateway: 192.168.0.1
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
10.1.1.0 255.255.255.0 10.1.1.16 1

Why can't I reach 192.168.0.1? Thanks.

Bill
 
Phillip Windell said:
Compare what you did to these. The articles are different, they describe
two different "models",...you have to use what applies to your situation.

Virtual Private Networking with Windows 2000: Deploying Router-to-Router
VPNs
http://www.microsoft.com/windows2000/server/evaluation/features/deplyr2rvpn.asp

Virtual Private Networking with Windows 2000: Deploying Remote Access VPNs
http://www.microsoft.com/windows2000/techinfo/planning/incremental/vpndeploy.asp
Click to expand...

Thanks. It was working, the Wizard just turns on filtering rules:

2. Next, you are prompted to select the interface that is connected to
the Internet. If the VPN server is not connected to the Internet, you
can select <No Internet connection>. The interface that you select
will be automatically configured with packet filters that allow only
PPTP and L2TP-related traffic. All other traffic is silently
discarded. For example, you will no longer be able to ping the
Internet interface of the VPN server. If you want to use the VPN
server computer as a network address translator (NAT), Web server, or
other function, see Appendix B.
 
Back
Top