Discussion Locked

VPN Access

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I set up one of my Windows 2000 servers as a VPN server using "Routing and remote access" users dial into their ISP and connect to the server fine, they can also ping both interfaces on the multihomed server, but they can't always get to the rest ofthe network. They'll be able to ping other servers and workstations and then suddenly the pings will start timing out, it's very unreliable. Any suggestions are welcome.

5 replies

by champ

Well, w/o being there to look at the network my first question would be is there an intrusion detection system that might be thinking you are doing a ping sweep on the network. So basically, look for some firewalls that might be turning off ping for that address. Second, make sure that the users are properly authenticating with on-site servers if in a domain/active directory environment. W/o knowing more I can't really guess what the problem would be.

by steve merrill

I was recently having a problem with this kind of a situation. As it turned out, I had the VPN address going to the server's address in the wrong subnet mask. i.e. we have a subnet that covers the first 64 addys, I had it authenticating to x.x.x.11,but it's address was going to be x.x.x.106. Once I had it connecting to the server's address in the right scope, it worked fine.

by tech010

How do I get clients to connect using to proper subnet mask. Clients are always assigned 255.255.255.255 as a mask and there's no where to change it. Thanks

by steve merrill

Go into your TCp/IP properties (in the properties screen for your connection) and take off DHCP, set it up manually. Use the IP address you want to use, subnet mask of 255.255.255.whichever one you want, and set your default gateway as your DHCP server.

by tech010

Thank you very much for your suggestions but I've resolved the issue. We have a watchguard firebox between our router and LAN, the box was set to use the same range of IP addresses for its' VPN users as the Windows 2000 server so the packets were being dropped. I've changed the Win2K address range and am working great now. Thanks again

This discussion is closed to new replies.