Solved

VPN clients connect, but can't access network

Posted on 2010-11-24
14
1,103 Views
Last Modified: 2012-06-27
I am configuring a new PPTP VPN on Server 2008 R2. Remote VPN Users can connect to the new VPN and ping the VPN server, but cannot access the network beyond it: ping requests to any other devices on the network just die.

I'm obviously missing a crucial step. Any ideas?

Thanks!
0
Comment
Question by:Stuart_Page
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 7
14 Comments
 
LVL 69

Expert Comment

by:Qlemo
ID: 34209901
When you set up the RRAS server, did you tick the "Allow local network access" (or similar) option?
0
 

Author Comment

by:Stuart_Page
ID: 34232683
I don't recall such an option. Checking through all of the settings on my current VPN, I don't see anything like what you're describing.

Thanks.
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 34233203
And you are right, that option does not exist.
Did you setup RRAS in Routing mode or only as RAS Server?
0
Save the day with this special offer from ATEN!

Save 30% on the CV211 using promo code EXPERTS30 now through April 30th. The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

 

Author Comment

by:Stuart_Page
ID: 34233547
I don't recall. Is there some way to verify this?
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 34234576
You see that in the RRAS server properties (in RRAS admin MMC).
0
 

Author Comment

by:Stuart_Page
ID: 34234647
This is just an RRAS server.
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 34234668
Try if switching Routing on helps (it should). I assume the RAS server uses an IP pool of the LAN, either statically assigned or obtained via DHCP? If the RAS IP pool provides addresses from a completely different range, it's getting more complicated.
0
 

Author Comment

by:Stuart_Page
ID: 34234707
I configured RRAS to use a IP range within one of the DHCP scopes on my DHCP server, so that VPN ip's would be obtained dynamically.

Where to turn on routing?
0
 

Author Comment

by:Stuart_Page
ID: 34234734
Routing was already checked here...
RRAS routing
0
 
LVL 69

Accepted Solution

by:
Qlemo earned 500 total points
ID: 34234801
It is checked (for IPv4), but you need to set it to "LAN and demand-dial routing".
0
 

Author Comment

by:Stuart_Page
ID: 34345775
Ok, so the problem was that the VPN was configured on an entirely different subnet from the rest of the network. Once I corrected that issue, traffic began to flow.

Thanks.
0
 

Author Closing Comment

by:Stuart_Page
ID: 34345781
I found the answer to my question on my own.
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 34345952
Of course it was, hence I recommended to switch demand dial routing on.
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 34345976
BTW, in such cases you usually do not accept any answer but your own, and not award with a grade of "C". That grade bluntly says "was of not much help providing some very general stuff".
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SCCM, SCOM or Something Else 6 65
Restore a DC asap 11 44
How to secure a Folder on a Windows Server 3 57
Windows server 2008 exchange 3 25
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question