Discussion Locked

VPN on NT4 Problem

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have setup MSVPN on the server, and the clients (1 win2k, and 1 win 98). The clients can get their connection to the server. The server is assigning the ip addresses for the clients via the Remote Access Service. Here is the problem. The clients get a ip address 192.168.1.x with a mask of 255.255.255.255, the server has the ip address 192.168.1.1 with a mask of 255.255.255.0. Why are the 2 getting different masks?

6 replies

by jcox303

Need a little more info, are the clients recieving their IP from DHCP, or a static pool? Also, are you using a router? What type of connection are you running?

by dean

Answers to jerimiah@vaforklift.com:
The clients are receiving their ip address fron the RAS server via static address pool.
The win2k machine is connected to the same network as the VPN server for testing. The win98 machine is connected to the internet via ADSL. The VPN server is in the dmz behind a firewall. The firewall is setup to allow pptp from the adsl's ip address.

by lccano

This is not necessarily an indication of a problem. Private addresses for RAS/VPN clients show up with a 255.255.255.255 mask because the ras/vpn device is seeing the client as a unique address rather than as a network + host address. You'll see the same thing when you vpn in to something like a sonicwall without assigning a private address or even if you do assign private addresses. Remember, with ip subnetting, the "ones" were markers for the part of the address that identified the "network" and did not change. The zeros marked off the host address and could change. If none of the bits can change, you have a unique network with one member, the network itself. Your ras/vpn device sees the client as a remote network with which it connects.

If you are having problems accessing resources I'd look at gateway and dns settings being handed out by ras server.

This discussion is closed to new replies.