Solved

2 nic RRAS server 2003 clients can ping/access comps on local network but comps on local can't ping/access back

Posted on 2009-07-08
4
376 Views
Last Modified: 2012-05-07
I have a server 2003 box with 2 nics setup for VPN and NAT. I went the second nic route to get past a 3rd party controlled firewall in our setup that is managed by an outside companys that wants big bucks just to open a few ports.

The lan nic has a static assigned of 192.110.175.232, subnet .128 and no gateway set.
The wan nic is set with a static also and has the gateway info for our isp.

Computers outside of this network are able to connect on the wan nic and access any computer on the network BUT the computers on the network are not able to communicate. ping or anything back.

The VPN server has no firewall enabled that I have configured or am aware of.
0
Comment
Question by:avaris4069
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 77

Expert Comment

by:Rob Williams
ID: 24812557
Have you enabled LAN routing in the RRAS configuration?
http://www.lan-2-wan.com/Added%20Images/1NIC/rras-1n-3.jpg

Do I understand correctly you have a server with which you bypassed a firewall, assigned a public IP, and have no software firewall enabled other than NAT? Sounds a little risky.
0
 

Author Comment

by:avaris4069
ID: 24812936
LAN routing is enabled. All firewalls are off because I am trying to troubleshoot and rule things out. Once I get the problem solved I will be using a software firewall and tell it to only allow traffic from specific incoming macs or ips.

But all that us after I fix this issue.
0
 

Accepted Solution

by:
avaris4069 earned 0 total points
ID: 24815294
Problem solved. I had to get a route with the address pool for the VPN added to the switch.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 24815324
Thanks for updating.
Interesting, adding a route was my first thought but I assumed the route must exist since the return reply from your client ping "found its way back home".
Good to hear.
Cheers!
--Rob
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Juniper VPN devices are a popular alternative to using Cisco products. Last year I needed to set up an international site-to-site VPN over the Internet, but the client had high security requirements -- FIPS 140. What and Why of FIPS 140 Federa…
This is a fairly complicated script that will install the required prerequisites to install SCCM 2012 R2 on a server.  It was designed under the functional model in order to compartmentalize each step required, reducing the overall complexity.  The …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question