?
Solved

VPN connection works but cannot browse or ping. Local and remote network both on same IP range.

Posted on 2005-03-24
16
Medium Priority
?
339 Views
Last Modified: 2010-04-12
I know this is an easy one, just have not had the time to wad through all the reults found during searchs.


I have a W2k server setup with RRAS. I use WinXP to connect to the server. I am using a linksys router on both sides to give each local network the 192.168.1.x ranges. The server has 2 NIC cards. 1 is a Static IP to the internet and other NIC has a static for the lan of 192.168.1.3. The DHCP on the server side local network range is 100-150. The RRAS client range is 200-220. When I connect I do get an address in the correct range. I just cannot browse by name or ping. When I use a dial up connection some name browsing works and can ping by IP.

I know the issue has to do with having the same network range on both sides.

How do I resolve this?

THanks
0
Comment
Question by:Goosey1313
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 7
16 Comments
 
LVL 19

Accepted Solution

by:
nodisco earned 600 total points
ID: 13622887
Sorry to give you the answer you don't want to hear but the solution is to change the network range on one side.  This is a problem that comes up all the time and the quick answer is - change the network that will require the least work

0
 
LVL 1

Author Comment

by:Goosey1313
ID: 13662654
Ok changed ALL the ip addresses on the client network and did all the other needed stuff. When I VPN in now, I can ping by IP and can access via \\10.0.0.1 etc... But how can I now access by name? Does DNS server need to be installed on the VPN server?

Thanks
0
 
LVL 19

Expert Comment

by:nodisco
ID: 13662868
You need your VPN server to propogate DNS to your clients on the way in - in your vpn pool of addresses you should setup your DNS server address be it local (if you have a LAN DNS server or if it is an external one like an ISP DNS server.

When your vpn client connects in - go to a dos prompt and type
ipconfig /all
to view the ip settings that the VPN server is giving you.
0
Ransomware Attacks Keeping You Up at Night?

Will your organization be ransomware's next victim?  The good news is that these attacks are predicable and therefore preventable. Learn more about how you can  stop a ransomware attacks before encryption takes place with our Ransomware Prevention Kit!

 
LVL 1

Author Comment

by:Goosey1313
ID: 13663242
When I VPN in as a client my IP stuff is this

Address Pool 10.0.0.200 <-> 220


IP: 10.0.0.204
Subnet: 255.255.255.0
Gateway: 10.0.0.204
DNS: 10.0.0.1

Now the 10.0.0.1 is the linksys router, I am not sure why it is assigning this number and not the address of the server which is 10.0.0.3 or 10.0.0.200 for VPN dialup.

And when I setup the address pool there is no place to set a DNS address. I am using a Static pool of addresses.

0
 
LVL 19

Expert Comment

by:nodisco
ID: 13670110
Have you tried using DHCP to set the ip settings for vpn users?  Have a look at this link :
http://support.microsoft.com/kb/160699/EN-US/
0
 
LVL 1

Author Comment

by:Goosey1313
ID: 13681940
Ok I have read through all of the article that I believe pertained to me.

What it says about DNS

"DNS
This is taken from the RAS server if the RAS server is configured with DNS server addresses. The client acquires the first DNS server address listed in the RAS server's DNS Service Search Order. "

From what I gather, either using the DHCP or static IP Pool, wont matter, DNS is gathered throught the servers DNS settings. I changed the server to use DHCP, the DHCP server is the linksys router. When I VPN in as a client it shows me that 10.0.0.1(router) is my DNS server address, which should be correct becuase the server uses this same address.

But I still cannot ping by name. I tried  hostname and hostname.workgroup format.

Thanks
0
 
LVL 19

Expert Comment

by:nodisco
ID: 13682040
What is the secondary DNS entry for the server?  as the router is not doing DNS.  It sounds like the first DNS record 10.0.0.1 that the server is using is invalid so the server uses the secondary address for DNS resolution.  If you are only receiving 1 DNS entry on the vpn client - it is picking up the 10.0.0.1 address which will not propogate DNS.

Check the second DNS address on the server - as a test, set the first one to be the same.  then get a vpn logon session setup and see if you get the correct DNS entry and test if it works.
0
 
LVL 1

Author Comment

by:Goosey1313
ID: 13683283
the primary DNS is set to the router 10.0.0.1 and the secondary is set to the serveritself 10.0.0.3
I get both DNS servers as a client when I VPN in.

Would I need to setup DNS server on the VPN server?
0
 
LVL 19

Expert Comment

by:nodisco
ID: 13831983
Goosey1313

I apologise - I have not come back to you on this incident - I missed it in mail updates.  Have you the situation resolved or are you still having problems?
0
 
LVL 1

Author Comment

by:Goosey1313
ID: 13836074
I am actually going to the clients house today to work on it. He has been out of town so i have had no chance to try the solutions out yet. I will let you soon how the outcome was.
0
 
LVL 1

Author Comment

by:Goosey1313
ID: 13839261
Ok, I tried it all again and still same outcome.

I have it setup like this now.

W2K server runs
-RRAS, setup to use DHCP
-DNS, has no A Host name entires
-DHCP - Setup to use DNS server setting to pass along to client
-2 NICS, NIC1 = Static IP from ISP, NIC2 = Static IP for local LAN (10.0.0.3)

Clients can connect just fine and browse/ping by IP address.
I can browse/ping the client machines by name and IP from the server.
Clients cannot browse/ping by name from to server LAN.

0
 
LVL 19

Expert Comment

by:nodisco
ID: 13841497
Pls post ipconfig /all from a vpn'd user and from the server

Just to clarify : on your post 04/01 you asked if you need to setup DNS serve on the VPN server - in your last post the w2k server does run dns - I don't understand which second server you are speaking of
0
 
LVL 1

Author Comment

by:Goosey1313
ID: 13842090
There is only 1 server. I am just trying different configurations on the same server to get this to work.
1 linksys router, 1 server, 4 lan computers, and 2-5 VPN users.

Client Ipconfig
------------------
PPP adapter PDE:

        Connection-specific DNS Suffix  . : pde
        Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
        Physical Address. . . . . . . . . : 00-53-45-00-00-00
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 10.0.0.160
        Subnet Mask . . . . . . . . . . . : 255.255.255.255
        Default Gateway . . . . . . . . . : 10.0.0.160
        DNS Servers . . . . . . . . . . . : 10.0.0.1
                                            10.0.0.3
        Primary WINS Server . . . . . . . : 10.0.0.3


Server ipconfig
------------------------
PPP adapter RAS server (Dial In) Interface:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
        Physical Address. . . . . . . . . : 00-53-45-00-00-00
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 10.0.0.158
        Subnet Mask . . . . . . . . . . . : 255.255.255.255
        Default Gateway . . . . . . . . . :
        DNS Servers . . . . . . . . . . . : 127.0.0.1

0
 
LVL 19

Expert Comment

by:nodisco
ID: 13842389
Just as a test - go into the Internet protocol options of the client and hard code the DNS server address to the ip address of your server (that runs DNS).  then logon over VPN and see if you can browse by name.  At least we can help isolate if there is a problem resolving DNS over the link.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you connect to your workplace's VPN, you may not notice that you are using your workplace's servers to serve up webpages.  This might be undesirable since the workplace can log all the places you've been.  It also might be very slow to load pag…
Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question