How to set the correct route for two networks connected via static VPN

Hello,

My main network is 10.0.92.0 MASK: 255.255.252.0 GW: 10.0.92.11. and we use ipaddresses in the range 10.0.92.0, 10.0.93.0, 10.0.94.0 and 10.0.95.0.
We have a other side with ip range 10.1.2.0 MASK 255.255.255.0 gw 10.1.2.1

On my workstation (10.0.92.45) i did: "Route -p add 10.1.2.0 MASK 255.255.255.0 10.0.92.254" on the other site is added "route -p add 10.0.92.0 MASK 255.255.252.0 10.1.2.9".
This is working fine.

But when i want to connect from a workstation (10.0.95.5) i did: "Route -p add 10.1.2.0 MASK 255.255.255.0 10.0.92.254" on the other site is added "route -p add 10.0.92.0 MASK 255.255.252.0 10.1.2.9".
This didn't work.

Can someone help me what route i have to add?

Thanks,

Edward
Edward van NijmweegenICT employeeAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
max_the_kingConnect With a Mentor Commented:
Hi,
you stated you're using static VPN and i'm taking for granted that you're routing VPNs correctly and that the gateways are able to terminate VPN fine.
That said, you're saying that in the same direction (from 10.0.92.45 to 10.1.2.0) it is working but no joy from 10.0.92.45.
This make no sense ... unless:

1. the workstation 10.0.92.45 has multiple IP addresses, in which case leave just one and it should work

2. operating system is interpreting subnet masks in a wrong way, in which case you may want to try, just as a test, to change static routes by using  
route -p add 10.0.92.0 MASK 255.255.255.0 10.1.2.9
route -p add 10.0.95.0 MASK 255.255.255.0 10.1.2.9
if it works, you can use a workaround by adding multiple routes on that PC.

hope this helps
max
0
 
Tomas ValentaIT ManagerCommented:
In route command the IP of the router must be on the same subnet and you do not have it.
THe 10.0.92.254 is the VPN server ? If YES, assign to this server additional IP addresses - 10.0.95.254,...
and here is correct
 a workstation (10.0.95.5): "Route -p add 10.1.2.0 MASK 255.255.255.0 10.0.95.254"
second choice is change MASK of your network with IP addresses 10.0.92-5.0 to have it on the same network.
0
 
Tomas ValentaConnect With a Mentor IT ManagerCommented:
Sorry Edward, I increase size of fonts and your IP config is correct, my mistake.

put here IPCONFIG /all and "route print" from all 3 computers - other side, your network good and your network bad computer
and also: tracert -d  to_other_IP from all three computers

Who is doing VPN ? Can you turn on VPN and routing logging on this device if all commands (tracert, IPCONFIG and route print) will
be OK ?
0
 
max_the_kingCommented:
Seem reasonable
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.