Does the Nic that you are using for VPN Connectivity have Internal DNS/Wins

If you disable the non VPN NIC can you ping other machines in your network
by name?
This nic is probably not passing all the info it needs to, to the client.
If you run IPCONFIG /all on the client   what do you get?






Joshua Morgan
PH: (864) 250-1350 Ext 133
[EMAIL PROTECTED]
http://www.profit-lab.com
http://ncontrol.info


-----Original Message-----
From: Juan Rosas [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, April 30, 2002 1:40 PM
To: NT 2000 Discussions
Subject: VPN Problems browsing anything beyond the VPNSERVER.


I have setup a stand alone Windows 2000 VPN server, we are using a DSL
connection to access the internet and a Linksys Router to route traffic
between our subnet and the internet.

The router configuration is the following:
DHCP is disable
the server and the router are in the same subnet.
I am forwarding incoming PPTP traffic at the router to go to the External
NIC on the VPNSERVER (ports 1723 and 47)

The VPNSERVER configuration:
two NICs one internal and the other one external
the internal does not have a gateway assigned (recommended by Microsoft) The
External has the router's IP as the gateway. all the devices are in the same
subnet and IP range. The VPN server is configure to assigned IP addresses to
the VPN clients. we are not using  RADIUS I have created local accounts in
the VPN server for the VPN clients and under their Dial in properties I
enable allow remote access.

The problem is when I VPN to the server I login successfully and can see
everything in the VPNSERVER, I can also ping the VPN server Nics (internal
and External). However, every time I try to PING or access any other PC or
server in the same subnet I get request time out, I cannot see any resources
outside the VPNSERVER. All the devices inside the subnet can ping the
internal VPNSERVER nic with no problem and vise versa.

I have check some tech notes from Microsoft and they mentioned GRE packets
been filter by our ISP. not the case GRE is not filter by our ISP.


Thanks,



Juan Rosas

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to