Windows 2003 & 2000 server RRAS + VPN

[wizzy337]

Hi All,


Here something I can't seem to figure out. I have a vpn tunnel for a site to site office. Using Win2k3 RRAS with VPN I sucessfully connected to HQ running Win2k RRAS. The remote site office is running a netgear router with built in ports. From the remote site office end, I'm able to ping the ip and dns name of the HQ site, map shares and all. But with only the actual server (win2k3)that is vpn to HQ. I have static routes running to and from HQ. From remote site static route destination is 192.168.200.0 mask 255.255.255.0. From HQ static route is destination 192.168.0.0 mask 255.255.255.0. The other workstations on the remote site cannot see anything from HQ. They are all connecting to the netear router. The ip for the remote site office is 192.168.0.x and the HQ site is 192.168.200.x How do I get the other workstations to see the HQ site without having to create indivdual vpn tunnels on see each workstation??

 

[minxca]

hi,

~~~~~~~~~~~~~~
I have static routes running to and from HQ. From remote site static route destination is 192.168.200.0 mask 255.255.255.0. From HQ static route is destination 192.168.0.0 mask 255.255.255.0.
~~~~~~~~~~~~~
I just want to make sure where you added these static route?
You said remote client use netgear router, you have to add static route on the router or each client.
How many gateway do you have on the HQ? if you have more than one you have to add static route also

 

[wizzy337]

Here is where I added the static route: Remote Site Win2k3, using RRAS, static route 192.168.200.0 255.255.255.0. From HQ - I have a user acctount setup for the remote site to use to connect via vpn. Under properties, dial in tab for the user account I configure the static route 192.168.0.0 255.255.255.0.

 

[minxca]

~~~~~~~~~~~~~~~~~~~~~~~~
The other workstations on the remote site cannot see anything from HQ. They are all connecting to the netear router.
~~~~~~~~~~~~~~~~~~~~~~~~
you have to tell the router to re-route 192.168.200.0/24 to your W2K3 internal IP address, do the samething for HQ.

If you don't want modify your router, try this:
1. At client PC (branch) add static route for destination 192.168.200.0/24 to W2k3 RRAS internal IP address
2. At client PC (HQ)add static route for destination 192.168.0.0/24 to W2k RRAS internal IP address
3. Try ping from both PC.