XP VPN Client connects to remote LAN but NOTHING ELSE seems to work 2

[duBe68]

Hi, I'm a complete NOOBIE with all things networkable, so please forgive me.
As a result of constant vandalisim at my business, I've recently installed a couple of Axis IP Cameras, which are attached to my Billion ADSL Router.
I've created both a PPTP and a L2TP LAN-to-LAN VPN entries in the work router that I was hoping would allow me to connect to the cameras from home.
When I create NEW NETWORK connection on my laptop at home (using XP Network Connection Wizard), the resultant connection tells me that I can connect to the work router via the VPN's. This is confirmed by the work router indicating that the tunnel is active & connected.
Problem is, I cannot do anything with the connections, I even lose all access to IE browsing until I close the VPN connection.
Sorry for the convoluted question, but I really don't know what is wrong, so I don't know what to include.
I'd be most grateful for your assistance.

 

[Lemon13]

on the client side, disable use standardgateway for remotenetwork

on the server side, enable ip-routing (Lan), otherwise ur stuck on the server

 

[ettienne]

Your computer becomes part of your company network once to connect to the VPN. Your internet browsing will use the company's internet connection instead of your local connection, so that is a sign that your VPN is working.
What were you expecting to happen?
How do you connect to the cameras when you are at work?

 

[cckens]

If this is a standard VPN connections you may have to set proxies if your internal LAN uses them. Some VPN clients (read: Microsoft) show up in the Internet Options->Connections under Dial-up and VPN settings. Set the options for the proxy and also make sure to check bypass proxy for local addresses. This will insure that you see the LAN local IPs with out going through the internet gateway.
Dependant on client you will either set the VPN proxy settings or the LAN proxy settings.
Should work, but I haven't setup a VPN connection in a while since getting my new position.
Try it and let us know.

cckens

"Not always my best shot, but I hit the target now and then"
-me

 

[Davetoo]

Connect up to your work via VPN, then fire up a browser and type in the internal IP address of the Axis cameras.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[cckens]

Boy, can I say "duh"...
Davetoo's right... IP-based browsing once connected to the VPN should be right perfect. Since you have been assigned a LAN IP through the VPN connection, you should be able to fire away from a browser and just get into the cameras...


cckens

"Not always my best shot, but I hit the target now and then"
-me

 

[linney]

Lost Internet connection when I VPN in to work?
thread1583-1478346

 

[duBe68]

Thanks for all the advice,

Lemon13:
I've tried both enabling & disabling the "Use Default Gateway" but no change. As for the IP Routing (LAN), I can't seem to find option like this, so my inexperience is hurting me.

ettienne:
I can see that I'm connected to the work LAN via the VPN tunnel, so I'm cool with that. What I don't understand is that the connection doesn't do ANYTHING AT ALL, I can't do anything with it. I just want to type in the LAN IP address of the IP camera; this is how I connect to the cameras when I'm at work. I thought that the LAN-to-LAN VPN would make my client part of work LAN, but it doesn't seem to do this, just jambs-up.

cckens:
I'm not at all "aut fait" with proxy settings, would you mind giving me a really "dumbed-down" explanation of what they are, what they do & a simple example?

Davetoo:
What you suggest is exactly what I thought I should be able to do. I am trying to type in the LAN IP address through the VPN, but alas it just times out every time. I cannot reach anything on my work router from the other end of the VPN, despite the tunnel being up.

Thanks heap folks, I really appreciate your advice

 

[cckens]

A proxy server is a system that caches items from other servers to speed up access. On the Web, a proxy first attempts to find data locally, and if it's not there, fetches it from the remote server where the data resides permanently.

Can be a hassle, but can also be a boon for sysadmins because they can intercept certain requests and "round-file" them (like a content filter). If your computer requires a login to get out to the internet (like mine did when I worked for a really big name company) you probably have a proxy on your network. Then again, you may never even know it's there.
Check Tools->Internet Options->Connections->LAN settings if the checkbox for Proxy Server is checked, then you are using a proxy. Duplicate the settings in your VPN connection under Tools->Internet Options->Connections with your VPN connection (I read up... you are using a MS VPN client so you need to fill this part in). This should get you to where you need to be.

Ken

"cckens is a nick... why the H-E- double-hockey-sticks am I using a nick for a name? Am I afraid of who I am?"
-me

 

[Davetoo]

When you connect to the VPN, drop to a command prompt and do an ipconfig/all, see if you're getting assigned an IP address from the network at the office. If so, can you ping anything at the office, including the Axis cameras?

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[duBe68]

Thanks again folks,

Ken:
That all makes sense (I think...) I'll try that when I get home this afternoon.

Davetoo:
When I get the VPN "Connection Successful" confirmation, it tells me that I am assigned a LAN IP address that is consistent with my work router settings, eg : 192.168.22.222, so I'm confident that's right.
I actually tried pinging the office LAN router & cameras last night on the command prompt, but they all just timed-out, despite the above being true.
It's got me baffled as I'm connected via the VPN, assigned the right LAN IP address, but I cannot reach any LAN resources.

Thanks again

 

[Davetoo]

Do a tracert to IP of one of the Axis cameras and see where it dies.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[duBe68]

Thanks again Davetoo,
I've heard of traceroute before but never knew it was command line instruction until I just tried your instruction "tracert 192.168.1.1", magic, thanks I've learned something else neat.

I'll give that a run from home this afternoon & see (as you suggest) where it dies.

Cheers buddy

 

[duBe68]

OK,
I've executed the TraceRoute and it goes nowhere; all "Request Timed Out".

As a matter of interest, I've jammed in another Billion Router on the client side, set up a VPN Dialout that matches a VPN Dialin on the work router.

As you may have guessed, I'm able to use the connection as expected & I can gain all access to the work LAN via the VPN.

My problem is that I cannot always use a router as I generally work mobile via my 3G connection.

So if I can sort out why the MS Win XP VPN connection doesn't allow me to do this, I'd be a very happy camper.

Cheers
duBe

 

[duBe68]

I've tried a couple of software VPN clients and still no luck.

Can anyone suggest anything else?

Thanks

 

[cckens]

Run a check at the office. Pipe a copy of ipconfig to a text file (as follows):
From a command line type:
ipconfig /all > c:\ip-office.txt
This will output the ipconfig to a text file on the c: drive
At home run this after vpn connected:
ipconfig /all > c:\ip-vpn.txt
This will give you a txt file of the vpn config. Check them both for consistency. If they both give the same information you're good to go. But I'd post the results just because. I would like to see the IP comparison.
To keep your company anonymity, remove information pertaining to your domain and computername to keep yourself safe, but keep the numeric IP info. If your company is using 192.168.x.x. or 10.x.x.x network IPs it's not like we can trace it back.


Ken

"cckens is a nick... why the H-E- double-hockey-sticks am I using a nick for a name? Am I afraid of who I am?"
-me
"...don't know why, but I think of chickens when I see that nick...maybe even choking chickens???"
-Tony

 

[linney]

Have you tried the VPN Forum?

Virtual Private Networks (VPN)

http://www.tek-tips.com/threadminder.cfm?pid=463

15 Tips for Troubleshooting VPN Connections

http://pigtail.net/LRP/pptp-tips.pdf

RDP issue
thread779-1391744

vpn connection
thread779-1252042

 

[cckens]

Not OP but thanks linney! Didn't have that one in my threadminder.

Ken

"cckens is a nick... why the H-E- double-hockey-sticks am I using a nick for a name? Am I afraid of who I am?"
-me
"...don't know why, but I think of chickens when I see that nick...maybe even choking chickens???"
-Tony (wahnula)

 

[duBe68]

Thanks guys,
I've been off the air for a while, after reading a forum thread on MS about a similar issue with XP SP3.

It recommended uninstalling SP3 and installing a later version of it.

Unfortunately for me, after uninstalling SP3, my laptop has stopped communicating all together.

So, as a result, I'm still madly trying to get System Restore to actually do what it is supposed to do. 4 goes over last 24 hours with no luck as yet.

I'm having to check this forum from a friend's place.

Thanks again people, I'll get onto your ideas on Monday & report back what I find. Your help is greatly appreciated.

duBe

 

[duBe68]

Hi again folks,
I've got my laptop going again, but now it won't connect to any XP VPN connections, so I've obviously mucked something up there big time, gotta keep investigating that.

In the meantime, I've tried using my friend's laptop to connect via a XP VPN and although I can connect, as always, I'm not able to reach any LAN resources.

Curiously enough, with my friend's laptop, I get the following error when connecting with the XP VPN:

*************************
One or more requested network protocols did not connect successfully.

TCP/IPCP connected successfully.

IPX/SPX or compatible CP reported error 733: A connection to the remote computer could not be completed. You might need to adjust the protocols on this computer. For further assistance, click More Info or search Help and Support Center for this error number.

Press Accept to use the connection as is, or Hang Up to disconnect.
**************************

Could this have any impact on the problems I'm having with the XP VPN connection?

And if so, could anyone advise how to rectify this?

Thanks again
duBe