We help IT Professionals succeed at work.
Get Started

Need help with tricky VPN routing issue

725 Views
Last Modified: 2012-05-10
Hi Experts,

I need your help in setting up routing in a somewhat complex network. Let me give you the facts first (the question is way at the bottom):

The installation has two physically separated networks, internal (192.168.0.0/24) and external (192.168.1.0/24).

On the external LAN there's a DD-WRT router (192.168.1.1) with OpenVPN installed, responsible for the Internet-connection. The OpenVPN network is 10.8.0.0/24, with the router having 10.8.0.1.

There is also a Windows 2008 R2 server with two NICs, connected to the external LAN on 192.168.1.7 and to the internal LAN on 192.168.0.7.

Additional user PCs are on the internal network, i.e. in the 192.168.0.0/24 subnet (e.g. PCSales on 192.168.0.150). They have no Internet connection, and are not supposed to be able to access the Internet. (As a general measure, their default gateway points to the Windows server on 192.168.0.7.)

I have some remote OpenVPN client that connects to the router's VPN, receives the VPN IP 10.8.0.6 and can ping the router (on 10.8.0.1) and connect to the server on 192.168.1.7 without problems - that's a standard setup I'm quite familiar with. (The PC received the pushed route 192.168.1.0/24 via 10.8.0.5.)

Now here's the problem: I would like to access the PCs on the internal network from my remote PC for maintenance purposes. How do I have to configure the system so that the remote PC can not only talk to the PCs on the external LAN but also to those on the internal? I expect that I need some combination of static routes on the internal PCs as well as configuration of the RRAS service on the Windows servser.

Thanks a lot for any _qualified_ advice. (Please do not reply if you are only guessing yourself.)

Thomas
Comment
Watch Question
"Batchelor", Developer and EE Topic Advisor
CERTIFIED EXPERT
Top Expert 2015
Commented:
This problem has been solved!
Unlock 1 Answer and 4 Comments.
See Answer
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE