I am having some problems with routing packets through my VPN to allow machines on one network to communicate with the machines on the other side of the VPN.
One one side of the VPN I have 192.168.1.0. On the other side of the VPN I have 192.0.2.0. The VPN is routed (Using OpenVPN if that matters) using 192.168.3.0. The two machines that terminate the VPN are 192.168.1.101 and 192.0.2.4. The default gateways are 192.168.1.1 and 192.0.2.1. The machine with 192.168.1.101 has a VPN IP of 192.168.3.2. The machine with 192.0.2.4 has a VPN IP of 192.168.3.1. I only want all machines on the 192.168.1.0 network to be able to see all machines on the 192.0.2.0 network. 192.0.2.0 does not need to see 192.168.1.0.
So this is how my routing goes as far.
On 192.168.1.101 I have all traffic going to 192.0.2.0 routed through 192.168.3.1. On 192.168.1.1 (The default gateway for 192.168.1.0) I have all packets going to 192.0.2.0 routed to 192.168.1.101. I also have all packets going to 192.168.3.0 routed to 192.168.1.101 on the default gateway. From all machines on the 192.168.1.0 network I can ping anything 192.168.1.0 and 192.168.3.2. From 192.168.1.101 I can ping anything 192.0.2.0, 192.168.3.0 and 192.168.1.0. When I tracert from any machine other then 192.168.1.101 on the 192.168.1.0 network, packets go to the default gateway (192.168.1.1) to 192.168.1.101 and then they stop. I also have IPEnableRouter set to 1 in the registry of 192.168.1.101. Why isn't 192.168.1.101 routing any packets from the rest of the machine on 192.168.1.0 through the VPN to 192.0.2.0?
Here are the routing tables.
192.168.1.101 (With VPN Interface at 192.168.3.2)
-------------------------------------------------
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff e1 6f 83 5d ...... TAP-Win32 Adapter V8 - Packet Scheduler Miniport
0x3 ...00 04 61 78 94 5c ...... NVIDIA nForce Networking Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.101 10
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.0.2.0 255.255.255.0 192.168.3.1 192.168.3.2 1
192.168.1.0 255.255.255.0 192.168.1.101 192.168.1.101 10
192.168.1.101 255.255.255.255 127.0.0.1 127.0.0.1 10
192.168.1.255 255.255.255.255 192.168.1.101 192.168.1.101 10
192.168.3.0 255.255.255.0 192.168.3.2 192.168.3.2 30
192.168.3.2 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.3.255 255.255.255.255 192.168.3.2 192.168.3.2 30
224.0.0.0 240.0.0.0 192.168.1.101 192.168.1.101 10
224.0.0.0 240.0.0.0 192.168.3.2 192.168.3.2 30
255.255.255.255 255.255.255.255 192.168.1.101 192.168.1.101 1
255.255.255.255 255.255.255.255 192.168.3.2 192.168.3.2 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None
192.168.1.1 (Default Gateway)
-----------------------------
Destination LAN IP Subnet Mask Default Gateway Hop Count Interface
0.0.0.0 0.0.0.0 24.211.0.1 1 WAN
24.211.0.0 255.255.240.0 0.0.0.0 1 WAN
192.168.1.0 255.255.255.0 0.0.0.0 1 LAN
192.168.3.0 255.255.255.0 192.168.1.101 1 LAN
192.0.2.0 255.255.255.0 192.168.1.101 1 LAN
thanks for any help you can give me.
-Craig
One one side of the VPN I have 192.168.1.0. On the other side of the VPN I have 192.0.2.0. The VPN is routed (Using OpenVPN if that matters) using 192.168.3.0. The two machines that terminate the VPN are 192.168.1.101 and 192.0.2.4. The default gateways are 192.168.1.1 and 192.0.2.1. The machine with 192.168.1.101 has a VPN IP of 192.168.3.2. The machine with 192.0.2.4 has a VPN IP of 192.168.3.1. I only want all machines on the 192.168.1.0 network to be able to see all machines on the 192.0.2.0 network. 192.0.2.0 does not need to see 192.168.1.0.
So this is how my routing goes as far.
On 192.168.1.101 I have all traffic going to 192.0.2.0 routed through 192.168.3.1. On 192.168.1.1 (The default gateway for 192.168.1.0) I have all packets going to 192.0.2.0 routed to 192.168.1.101. I also have all packets going to 192.168.3.0 routed to 192.168.1.101 on the default gateway. From all machines on the 192.168.1.0 network I can ping anything 192.168.1.0 and 192.168.3.2. From 192.168.1.101 I can ping anything 192.0.2.0, 192.168.3.0 and 192.168.1.0. When I tracert from any machine other then 192.168.1.101 on the 192.168.1.0 network, packets go to the default gateway (192.168.1.1) to 192.168.1.101 and then they stop. I also have IPEnableRouter set to 1 in the registry of 192.168.1.101. Why isn't 192.168.1.101 routing any packets from the rest of the machine on 192.168.1.0 through the VPN to 192.0.2.0?
Here are the routing tables.
192.168.1.101 (With VPN Interface at 192.168.3.2)
-------------------------------------------------
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 ff e1 6f 83 5d ...... TAP-Win32 Adapter V8 - Packet Scheduler Miniport
0x3 ...00 04 61 78 94 5c ...... NVIDIA nForce Networking Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.101 10
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.0.2.0 255.255.255.0 192.168.3.1 192.168.3.2 1
192.168.1.0 255.255.255.0 192.168.1.101 192.168.1.101 10
192.168.1.101 255.255.255.255 127.0.0.1 127.0.0.1 10
192.168.1.255 255.255.255.255 192.168.1.101 192.168.1.101 10
192.168.3.0 255.255.255.0 192.168.3.2 192.168.3.2 30
192.168.3.2 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.3.255 255.255.255.255 192.168.3.2 192.168.3.2 30
224.0.0.0 240.0.0.0 192.168.1.101 192.168.1.101 10
224.0.0.0 240.0.0.0 192.168.3.2 192.168.3.2 30
255.255.255.255 255.255.255.255 192.168.1.101 192.168.1.101 1
255.255.255.255 255.255.255.255 192.168.3.2 192.168.3.2 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None
192.168.1.1 (Default Gateway)
-----------------------------
Destination LAN IP Subnet Mask Default Gateway Hop Count Interface
0.0.0.0 0.0.0.0 24.211.0.1 1 WAN
24.211.0.0 255.255.240.0 0.0.0.0 1 WAN
192.168.1.0 255.255.255.0 0.0.0.0 1 LAN
192.168.3.0 255.255.255.0 192.168.1.101 1 LAN
192.0.2.0 255.255.255.0 192.168.1.101 1 LAN
thanks for any help you can give me.
-Craig