?
Solved

VPN issue

Posted on 2013-05-24
7
Medium Priority
?
272 Views
Last Modified: 2013-07-10
I have three sites which are connected together using a firewall based IPSEC site to site VPN. I also have several machines which connect to a server using SSTP VPN for remote access. The issue is that the machines which are connecting using the SSTP VPN are only able to connect to machines on the local subnet of the server which they are connecting and not the other sites. I found a work around in adding a static route manually on machines; however these machines are out of my control and the users aren't exactly "tech savvy". If I try adding a route using the routing and remote access console I loose access to the network which the route relates to.

How can I overcome this?

Any help is greatly appreciated
0
Comment
Question by:kieran_stoney
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 20

Expert Comment

by:agonza07
ID: 39196166
Not sure if this still applies on 2008, or if its been replaced by something else, but approach #2 is still an option.

http://blogs.technet.com/b/rrasblog/archive/2006/06/30/routing-to-multiple-networks-behind-vpn-server.aspx

Approach #2, DHCP configured static routes.
http://technet.microsoft.com/en-us/library/dd145324(v=ws.10).aspx
(look at the "static routes" section)
0
 
LVL 1

Author Comment

by:kieran_stoney
ID: 39196393
Won't that cause an issue with dhcp clients on the local network not being able to access other sites?
0
 
LVL 20

Expert Comment

by:agonza07
ID: 39196526
Depending on how your network is configured. If you need to worry about that then maybe configuring reservations is the way around that.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 1

Author Comment

by:kieran_stoney
ID: 39196534
I've done some research and came across using the default routing and remote access class within DHCP. However when I create the route using this it doesn't appear to be assigned to any machines.
0
 
LVL 46

Expert Comment

by:Craig Beck
ID: 39197108
The routes specified in the RRAS class will only apply to the RRAS server - not the clients.  

Also, as I understand it, RRAS actually obtains the DHCP lease and kind-of proxies it to the client (for want of a better way of explaining it).  The client receives a /32 address from the RRAS server which was assigned to the RRAS server via DHCP, so any options from the DHCP scope won't actually reach the client over a VPN-established connection.
0
 
LVL 1

Accepted Solution

by:
kieran_stoney earned 0 total points
ID: 39301751
Issue resolved by creating new scope for vpn clients and assigning static routes within it.
0
 
LVL 1

Author Closing Comment

by:kieran_stoney
ID: 39313533
resolved
0

Featured Post

Building an interactive eFuture classroom

Watch and learn how ATEN provided a total control system solution including seamless switching matrix switch, HDBaseT extenders, PDU, lighting control to build an interactive eFuture classroom.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question