Server can ping "x" , Client cannot ping "x", but Client can

[Maxm412]

Let me give you little run down of my simple setup and explain the problem.
1) I have a server running server 2000
it is configured with RRAS and is its own router.

2) I have a windows xp pro for the client.

The problem is that I can ping a number of ip address with the client. Ip's that allow pinging like yahoo.com and others.

However, I was trying to setup a citrix connection on the client but the problem is I can't even ping the citrix ip address with the client. However, I can ping the citrix ip with my server and I am able to connect on the citrix client from the server.

I believe that if I can figure out why I can not ping the citrix server IP on the client and get that corrected I should be able to connect the citrix session on the client. I just can not figure out why I would not be able to ping an ip that my server can ping, BUT CAN ping other ips.

please help.

 

[ChicagoTechNet]

quoted from

http://www.chicagotech.net

Can't access the remote network from VPN clients
Symptoms: Your VPN client can ping/access the server but not other computers in the remote network.
Resolutions: 1) if you have two NICs in the VPN server, you may need to enable IP Routing. To do this, go to the RRAS>the Properties of the server>IP, check IP Routing.
2) Make sure you don't uncheck Use the remote default gateway on VPN client's VPN connection.
3) Make sure VPN client's LAN and the remote LAN are using the different IP range and subnet.
4) Check routing table for troubleshooting.


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[Maxm412]

First off, thanks soooo much for the help and suggestions, just like to point out a couple things.

I should have clearified a litte more with my problem.
I only mentioned the RRAS because that is where you configure your server to "ACT" as the router itself. There is actually no VPN connections taking place.

This situation is soley a single domain network, server, and client.

Also, I do have Ip routing checked off on the RRAS server properties as that was required to make it an official router for my client.

Basically, it is a question of what on my server could be stopping my client from pinging an ip that the server can ping, BUT (the big but) why can the client still ping other ips like yahoo (lmhost?) NOTE: no firewall hardware or software.

 

[IPEngineer]

Have you got any VPN client software running as a service that incorporates a stateful firewall option.

I had the instance where I had two clients on the same subnet, the IP network was fine and fully verfied, One of the clients could ping everything in the subnet, but could not be pinged from those clients. A one way pinging problem (Plus a load of other application hassle with dropped connections to servers etc...)

After lots of heartache the problem was identified to VPN client software that wasn't currently connected for VPN tunnelling, but was running as background service by default but idle. This software had a stateful firewall that was causing havoc with Apps that tried to setup connections back to this host.

Just in case it helps.....

Rgds
IPEngineer

 

[GlenJohnson]

You might want to post ipconfig /all from the client, and trace rt to a site you can't reach so we can get a better idea what's going on. Good luck.

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin feel free to join the Tek-Tips in Chicago, Illinois Forum.

TTinChicago
Johnson Computers