Computing.Net > Forums > Windows Server 2003 > Routing and Remote Access

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Routing and Remote Access

Reply to Message Icon

Name: Analyst
Date: August 18, 2008 at 18:04:10 Pacific
OS: Win2003
CPU/Ram: 2GB
Product: Virtual
Comment:

Hey folks. I have a Windows 2003 server setup as a virtual server. It has one "virtual" NIC and everything sits behind a Linksys router with the ports forwarded.
I enabled the Routing and Remote access service and I'm a able to successfully make a connection from the outside (via Verizon aircard) with Windows XP Pro "Create a new Connection" VPN. Problem is, I can ping the server by IP only and access shares on the server, but only by manually browsing as \\192.168.1.250. I can't ping any other IP devices, such as printers, on the LAN (where the server is) and can't resolve host names like the server's name or Yahoo.com. I also can't ping any outside IP addresses.
I looked for some restrictive policy and did a search but all I could find was a lot of people with the same problem but no resolution. Anybody point me at least in the right direction? Thanks.

Assume that I already did an Internet search.



Sponsored Link
Ads by Google

Response Number 1
Name: paulsep
Date: August 19, 2008 at 02:07:38 Pacific
Reply:

So I guess, you are using a End-to-End VPN.
That means, that the client only authenticates to the server and can't see the rest of the network.

What you need is a VPN Site-to-End, that allows to connect and access to the whole network.


0

Response Number 2
Name: Analyst
Date: August 19, 2008 at 05:57:28 Pacific
Reply:

Paul, no it's not a gateway to gateway VPN, if that's what you mean to say. It's Windows XP and Windows 2003 Server. Thank you for you attempt.

Does anyone else have any ideas on the routing issue with Routing and Remote Access? Thanks.

Assume that I already did an Internet search.


0

Response Number 3
Name: wanderer
Date: August 19, 2008 at 11:55:57 Pacific
Reply:

Paulsep explained it correctly.

When you say gateway to gateway vpn you mean site to site vpn.

What Paulsep explained is you have a client to client vpn or end to end vpn which restricts your access to the server and no where else.

You want a end to network vpn. We do this with vpn capable routers and by putting the vpn client on the xp station they are able to authenicate to the router which then gives them access to the entire network

Imagine the power of knowing how to internet search
http://www.lib.berkeley.edu/Teachin...


0

Response Number 4
Name: Analyst
Date: August 19, 2008 at 12:27:54 Pacific
Reply:

Wanderer, thanks. I've worked with computer networks for 11 years now. I'm pretty familiar with and implemented a number of VPN routers in both gateway to gateway and client to gateway configurations. I've even implemented VPN solutions involving Windows 2003 Small Business Server- Small Business Server has a lot of GUI tools for making implementation easy and does a lot for you.

But this is the first time I've tried using Routing and Remote access on Windows 2003 "Standard" server as a VPN solution. I know using VPN hardware would be an easier solution, but I want to try and get this working with Routing and Remote Access using the setup I described above in the first post.

So I guess to try and make my question a little clearer.....
- Does anyone know what my problem may be or where it may lie as I described it in my first post, or does anyone know for a fact it just can't be done by using what I'm trying to use?
There's no need to point out other VPN solutions as I am aware of those, and I'm trying to get this to work with Routing and Remote Access in Windows 2003 Standard. Thanks.

Assume that I already did an Internet search.


0

Response Number 5
Name: wanderer
Date: August 19, 2008 at 15:09:03 Pacific
Reply:

This should address your issue.

http://support.microsoft.com/kb/243374

Imagine the power of knowing how to internet search
http://www.lib.berkeley.edu/Teachin...


0

Related Posts

See More



Response Number 6
Name: Analyst
Date: August 19, 2008 at 21:16:07 Pacific
Reply:

Thanks. I gave it a try but still doesn't work. I've tried various setup options: VPN, VPN and NAT and basic firewall, and VPN and NAT and LAN Routing. I've looked at various options and even tried installing a MS Loopback adapter to give the system 2 network adapters and checked various settings. I can ping the server while connected but can't connect to anything else, either the web or local network.
Hrmmmmmm....

Assume that I already did an Internet search.


0

Response Number 7
Name: paulsep
Date: August 20, 2008 at 01:05:38 Pacific
Reply:

What's about the ip configuration?
When you are connected, check the ip configuration at the server and at the workstation by:
IPCONFIG /ALL

Maybe that there is a Subnet Mask of 255.255.255.255 or something like that, that didn't let you access the rest of the network.


0

Response Number 8
Name: wanderer
Date: August 20, 2008 at 08:12:03 Pacific
Reply:

I took from the article you need to do the manual config and choose to include the routing. To route to your lan you need to engage RRAS and you must have a 2nd nic. Loopback doesn't do it.

Imagine the power of knowing how to internet search
http://www.lib.berkeley.edu/Teachin...


0

Response Number 9
Name: Analyst
Date: August 22, 2008 at 19:58:02 Pacific
Reply:

Got it figured out (for what I need). I swapped the router, which was a Linksys WRT54G, for a used Symantec VPN200. When I did that, had trouble connecting until I went in RRAS in the server properties and unchecked the "Multilink connection" option under the PPP tab. Then I was able to connect and ping all LAN devices where the server is and access the Internet. I can access websites by domain name, but couldn't ping LAN computers by name. No big deal, as long as I can access them by IP address.

Seems Linksys routers (or at least that model) may have some issue passing through Protocol 47 (GRE), which is some sort of encapsulated routing protocol, even though I had fairly recent firmware (only about 1 revision behind). In any case, router replacement pretty much fixed it. Thanks to all for the help... kinda got me pointed in the right direction.

Assume that I already did an Internet search.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: Routing and Remote Access

Routing and remote access www.computing.net/answers/windows-2003/routing-and-remote-access/4770.html

Routing and Remote Access www.computing.net/answers/windows-2003/routing-and-remote-access/5564.html

routing and remote access www.computing.net/answers/windows-2003/routing-and-remote-access/1900.html