Solved

Routing and Remote Access

Posted on 2001-06-06
9
147 Views
Last Modified: 2010-04-13
I have a W2K Server box setup doing NAT between my ADSL modem and the internal LAN. No probs really in setting it up and the translation seems to work fine for all the machines in the LAN.

I've also installed a modem on this server and would like to dial into it for remote access. I can establish a RAS session (from another W2K machine with a modem) and can see (ping) the machines on the inside LAN.

What I cannot seem to figure out is how to configure the server so that the RAS dialled in user can also access the Internet via the DSL.

For some reason when I do an ipconfig (on the dialled in box) it shows my gateway as the same as the ip address (i.e. something like 192.168.0.100)

The Gateway should (I would have thought) be set to the server itself 192.168.0.1

Any ideas on how to set the gateway for RAS users?

Am I barking up the wrong tree?

Can this even be done at all?

Do I need some static routes or something like that?

You help is appreciated.


Regards
Marty
0
Comment
Question by:mravell
9 Comments
 
LVL 14

Accepted Solution

by:
AvonWyss earned 200 total points
ID: 6159327
In RRAS on the server (!), create a dial-on-demand interface named exactly the same as the dialin user. Put anything as password and destination number.

This interface will be used on the server when the user dials in. Because of this, you can add the user's interface to the NAT as private interface, et voila, he will have access via the NAT.

This wortks also for VPN connection, and it's also useful if you need to assign some special routes to a specific user.
0
 
LVL 5

Expert Comment

by:dcgames
ID: 6159882
Avon,

Can you point to some info on this or elaborate a bit? This sounds like a useful technique.

Dave
0
 
LVL 6

Expert Comment

by:Portang
ID: 6159977
???

The limitation of Windows 2000 RRAS is that you can only have no more than one NAT routing.

And ... Windows 2000's implementation of NAT requires exactly two interfaces - one, and only one private, and one, and only one public.

Surely you're free to create as many interfaces as you like. But you can only assign ONE private interface for NAT. Unfortunately, that one happens to be the internal LAN adapter, so anything else is out of luck.

ONE, and only ONE private interface!
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 14

Expert Comment

by:AvonWyss
ID: 6160043
Portang, sorry but you're wrong. You can have as many interfaces (both public and private) as you want for NAT. The routing is done in regards of the routing table and can include several interfaces. I use this all the time myself.

Dave, Windows 2000 RAS will connect an existing DOD interface to a connecting user if the interface has the user's name. This allows to have special routes or bindings (NAT for instance) for single users. You could say that DOD interfaces are not only outgoing, but also ingoing.
0
 
LVL 6

Expert Comment

by:Portang
ID: 6160096
> You can have as many interfaces (both public and private) as you want for NAT.

Maybe I'm wrong ... but I do have trouble adding more than two interfaces into the "Network Address Translation" routing protocol.
0
 
LVL 14

Expert Comment

by:AvonWyss
ID: 6160124
Portang, be my guest and look at my NAT config (it's in German, but you'll get the idea) here: http://snoopy.horsenet.ch/nat.gif

I have two public interfaces ("Internet" and "Internet ISDN") and three private interfaces ("LAN-Verbindung", "VPN-Mammut" and "VPN-Goliath"). This works like a charm.
0
 
LVL 6

Expert Comment

by:Portang
ID: 6161430
This is amazing. I'll go ahead and give it a try.

Thanks a lot Avon. A picture is worth a thousand words!
0
 
LVL 5

Expert Comment

by:cempasha
ID: 8194829
Dear questionner/expert(s)

No comment has been added lately, so it's time to clean up this TA.
I'll leave a recommendation in the Cleanup topic area that this question is to be:

- Answered by: AvonWyss

Please leave any comments here within the next seven days.

==> PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER ! <==

PaSHa

Cleanup volunteer



0
 

Expert Comment

by:Chmod
ID: 8241349
As recommended

Chmod
Community Support Moderator @Experts Exchange
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
unable to search  data in SQL 2000 server 10 312
vCenter Converter Standalone 4.01 - Convert Old Server 2000 to VM 4 202
Screen Mirroring 7 87
Windows 2000 48-bit LBA 13 49
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In previous parts of this Nano Server deployment series, we learned how to create, deploy and configure Nano Server as a Hyper-V host. In this part, we will look for a clustering option. We will create a Hyper-V cluster of 3 Nano Server host nodes w…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question