I will try to keep it short

OK,

Have an office that I am working on that has 5 staticIP's provided by their ISP. I currently have one IP that points to a server that has two nic's, one on the WAN side and one on the LAN side, this server is also the DHCP and the DNS server for the LAN. Then I have a hardware VPN on another one of WAN IP's. The problem I am having is:

The device shows that the VPN tunnel is established, and I can ping to the LAN IP of the VPN, but am unable to get to anything on the LAN side. I know this is just a small tweek in the routing that I am missing, but what is it?

Post if you need more info.

A diagram of the actual main components might help here.

IP1.....IP2.....IP3.....IP4.....IP5
WAN.....LAN.....WAN.....LAN.....LAN
VPN

WAN-----Server-----ISP
Lan-----


or whatever.


:)


edit: 3 articles re Vista and this issue - may prove useful;

http://www.smallbusinesscomputing.co...le.php/3791176
http://www.smallbusinesscomputing.co...le.php/3785976
http://itmanagement.earthweb.com/net...Over-a-VPN.htm

Quote:

---

Originally Posted by Irish Shark

OK,

Have an office that I am working on that has 5 staticIP's provided by their ISP. I currently have one IP that points to a server that has two nic's, one on the WAN side and one on the LAN side, this server is also the DHCP and the DNS server for the LAN. Then I have a hardware VPN on another one of WAN IP's. The problem I am having is:

The device shows that the VPN tunnel is established, and I can ping to the LAN IP of the VPN, but am unable to get to anything on the LAN side. I know this is just a small tweek in the routing that I am missing, but what is it?

Post if you need more info.

---

I *think* the issue here is that you are not getting correct IP info. The VPN endpoint is what is giving out the IP addresses. Make sure it's configured to provide IP's from the DHCP server. If it's giving out an internaly configured range of IP's, it may not be the same as the internal range that you are using.

Quote:

---

Originally Posted by Matridom

I *think* the issue here is that you are not getting correct IP info. The VPN endpoint is what is giving out the IP addresses. Make sure it's configured to provide IP's from the DHCP server. If it's giving out an internaly configured range of IP's, it may not be the same as the internal range that you are using.

---

The VPN is NOT giving out IP's. The server is, the VPN LAN side is configured with a static IP in the range of the IP's giveb out by the server for the local network.

Quote:

---

Originally Posted by CCT

A diagram of the actual main components might help here.

IP1.....IP2.....IP3.....IP4.....IP5
WAN.....LAN.....WAN.....LAN.....LAN
VPN

WAN-----Server-----ISP
Lan-----


or whatever.


:)


edit: 3 articles re Vista and this issue - may prove useful;

http://www.smallbusinesscomputing.co...le.php/3791176
http://www.smallbusinesscomputing.co...le.php/3785976
http://itmanagement.earthweb.com/net...Over-a-VPN.htm

---

The articles are for software VPN's, which I don't have a problem with. The VPN is between two VPN hardware devices, between two office locations. I can access network resources from MAIN office to REMOTE through the VPN tunnel with no problem, but I am unable to do the same from the REMOTE to the MAIN.

here is some idea of how it lays out. Actual IP's have been changed.

Server
NIC-1
WAN 89.123.12.112
SUB 255.255.255.0
DEF 89.123.12.1
DNS 99.123.98.5
99.123.89.6

NIC-2 (This gives out DHCP and is the DNS for the LAN)
IP 192.168.111.2 (Static)
SUB 255.255.255.0
DEF 192.168.111.2

VPN (with DHCP off)
NIC-1
WAN 89.123.12.113
SUB 255.255.255.0
DEF 89.123.12.1
DNS 99.123.98.5
99.123.89.6

NIC-2 (LAN)
IP 192.168.111.9 (Static)
SUB 255.255.255.0

REMOTE
NIC-1
WAN (Dynamic)
SUB (Dynamic)
DEF (Dynamic)
NIC-2 (LAN) (DHCP server for LAN)
IP 10.10.10.1
SUB 255.255.255.0
DEF 10.10.10.1

Like I said, the VPN tunnel ip up and running, the issue is the routing on the MAIN side. Let me know if you need more

I got a number of good info hits using this Coogle search string;

hardware VPN tunnel unable to access LAN side


I hope that helps.

Anyone else have any experience doing this?

Firmware on the Remote side VPN was corrupt. FIXED