Solved

How to set the correct route for two networks connected via static VPN

Posted on 2016-11-09
4
17 Views
Last Modified: 2016-11-30
Hello,

My main network is 10.0.92.0 MASK: 255.255.252.0 GW: 10.0.92.11. and we use ipaddresses in the range 10.0.92.0, 10.0.93.0, 10.0.94.0 and 10.0.95.0.
We have a other side with ip range 10.1.2.0 MASK 255.255.255.0 gw 10.1.2.1

On my workstation (10.0.92.45) i did: "Route -p add 10.1.2.0 MASK 255.255.255.0 10.0.92.254" on the other site is added "route -p add 10.0.92.0 MASK 255.255.252.0 10.1.2.9".
This is working fine.

But when i want to connect from a workstation (10.0.95.5) i did: "Route -p add 10.1.2.0 MASK 255.255.255.0 10.0.92.254" on the other site is added "route -p add 10.0.92.0 MASK 255.255.252.0 10.1.2.9".
This didn't work.

Can someone help me what route i have to add?

Thanks,

Edward
0
Comment
Question by:nijmedw
  • 2
  • 2
4 Comments
 
LVL 9

Expert Comment

by:Tomas Valenta
ID: 41880305
In route command the IP of the router must be on the same subnet and you do not have it.
THe 10.0.92.254 is the VPN server ? If YES, assign to this server additional IP addresses - 10.0.95.254,...
and here is correct
 a workstation (10.0.95.5): "Route -p add 10.1.2.0 MASK 255.255.255.0 10.0.95.254"
second choice is change MASK of your network with IP addresses 10.0.92-5.0 to have it on the same network.
0
 
LVL 15

Accepted Solution

by:
max_the_king earned 300 total points (awarded by participants)
ID: 41880307
Hi,
you stated you're using static VPN and i'm taking for granted that you're routing VPNs correctly and that the gateways are able to terminate VPN fine.
That said, you're saying that in the same direction (from 10.0.92.45 to 10.1.2.0) it is working but no joy from 10.0.92.45.
This make no sense ... unless:

1. the workstation 10.0.92.45 has multiple IP addresses, in which case leave just one and it should work

2. operating system is interpreting subnet masks in a wrong way, in which case you may want to try, just as a test, to change static routes by using  
route -p add 10.0.92.0 MASK 255.255.255.0 10.1.2.9
route -p add 10.0.95.0 MASK 255.255.255.0 10.1.2.9
if it works, you can use a workaround by adding multiple routes on that PC.

hope this helps
max
0
 
LVL 9

Assisted Solution

by:Tomas Valenta
Tomas Valenta earned 200 total points (awarded by participants)
ID: 41880358
Sorry Edward, I increase size of fonts and your IP config is correct, my mistake.

put here IPCONFIG /all and "route print" from all 3 computers - other side, your network good and your network bad computer
and also: tracert -d  to_other_IP from all three computers

Who is doing VPN ? Can you turn on VPN and routing logging on this device if all commands (tracert, IPCONFIG and route print) will
be OK ?
0
 
LVL 15

Expert Comment

by:max_the_king
ID: 41906993
Seem reasonable
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
Outsource Your Fax Infrastructure to the Cloud (And come out looking like an IT Hero!) Relative to the many demands on today’s IT teams, spending capital, time and resources to maintain physical fax servers and infrastructure is not a high priority.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now