Routing between private and public subnets with RRAS

[ism2023]

hello people..

I have a question relating to 2kAS & RRAS

my scenario is this - I have a public IP range currently in use on my server network, on this range is a RRAS server with 2 NIC's that acts as a gateway for a private range..

so the RRAS server has this IP setup

WAN
IP 196.x.x.x
subnet 255.255.255.x
gateway 196.x.x.1 (router)

dns is running on my lan, so dns is pointing to 196.x.x.10

LAN
IP 10.0.0.1
subnet 255.0.0.0

no gateway for this NIC set

DNS is also running on the RRAS box (secondary - get's its zone data from LAN side)

now, in this model I can obviously see the public (196.x) block fine - but can only ping by IP - hostnames dont work.

internet access is fine, so RRAS is doing it's job as far as i can tell.. - ip & port forwarding are all fine

I can't see the private range (10.x) from the public range (196.x) at all - obviously cos the RRAS box is NAT'ing the packets so according to public computers the IP route stops at the RRAS box..

my nirvana would be to be able to see the public range by hostname from the private, and vice versa..

I can imagine the solution being fiddling with RRAS and DNS, but anyone that can point me in the right direction will be on my christmas card list for life


thanks for reading folks..

 

[GiaBetiu]

Good.

Now, are your DNS servers ok? Are they solving locally?

You are complaining that you cannot reach external network via name. I think is obvious to not be able to reach it without to have a zone defined for that area.
Define in your DNS server a zone for the computers from 196.x area. When a PC will send a query to your DNS it should be able to check in its zones.

(*)What I don't understand is who keeps that zone? Your ISP? Have you a registered domain? Or you are speaking about a DMZ, and inside of it you decided to keep your DNS zone?

Also, I see that you are using NAT. And you are saying that your PCs are accessing the internet without problems (ie: the DNS server set to be use by your NAT server is solving external querries).

So,... answer first to the question (*).
Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k

 

[BruceMoose]

I to have this problem, the machines on the LAN can get to the Internet, the ones on dial up can not, event through both are served by the same DHCP

I guess this must be a routing issue of some kind, but been over the routing table and it looks good, is there a box somewhere?