Help with Routing

Dear all

My Domain consists of 3 Sites

London: 192.168.0.0/24
Brighton: 192.168.1.0/24
Eastbourne: 192.168.2.0/24

Each Site has a DC running RRAS on 192.168.x.3/24 and a 3rd party firewall
on 192.168.x.1/24 which doesn't allow multiple routes.

There are VPN's set up between London and Brighton and Brighton and
Eastbourne that go to a seperate VPN Server in Brighton on 192.168.1.6.

The Current Configuration for routing on the RRAS server for London and
Eastbourne are

0.0.0.0 Mask: 0.0.0.0 192.168.x.1

The Current Configuration for routing on the RRAS server for Brighton is:

0.0.0.0 Mask: 0.0.0.0 192.168.1.1
192.168.0.0 Mask 255.255.255.0 192.168.1.6
192.168.2.0 Mask 255.255.255.0 192.168.1.6

I need to be able to set a route from London to Eastbourne but don't knoe
how and i don't want to set a VPN Between London and Eastbourne.

Can anyone help me??

Thanks

James

"James Hill" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> London: 192.168.0.0/24
> Brighton: 192.168.1.0/24
> Eastbourne: 192.168.2.0/24
>
> Each Site has a DC running RRAS on 192.168.x.3/24 and a 3rd party
> firewall on 192.168.x.1/24 which doesn't allow multiple routes.
> There are VPN's set up between London and Brighton and Brighton and
> Eastbourne that go to a seperate VPN Server in Brighton on 192.168.1.6.

You have not given us all the "pieces" of all three sites. What does the
"DC running RRAS" have to do with anything? All you said was that it
"exists".

Let me make some wild assumptions and see if I get it right. If I am wrong
then you will have to clear things up.

I am assuming that:
1. The DC with RRAS is the "VPN Server" creating the Site-to-Site VPN
2. The DC with RRAS has a "mystery Nic" on the external side that you
never mentioned and it connects to the Internet to create the Tunnel
without involving the "firewall".
3. Since the firewall can't accept multiple routes, the Clients will
have to
use the DC/RRAS/VPN boxes as their Default Gateways.

Play close attention to the Masks in the Static Routes

__________________________________________________ _____
London:
Network ID = 192.168.0.0/24
Internet Router (firewall) = (Int)192.168.0.1 (Ext)???.???.???.???
VPN Router = (Int)192.168.0.3 (Ext)???.???.???.???

1. All Hosts on the LAN will use the VPN Router 192.168.0.3 as their
Default Gateway
2. The VPN Router will use the firewall 192.168.0.1 as its Default
Gateway
3. The VPN Router will use this Static Route
192.168.0.0 Mask 255.255.0.0 192.168.1.3
__________________________________________________ ______
Brighton:
Network ID = 192.168.1.0/24

Internet Router (firewall) = (Int)192.168.1.1(Ext)???.???.???.???
VPN Router #1 = (Int)192.168.1.3 (Ext)???.???.???.???
VPN Router #2 = (Int)192.168.1.6 (Ext)???.???.???.???

1. All Hosts on the LAN will use *either* VPN Router as their Default
Gateway,..but let's choose 192.168.1.3
2. The VPN Router will use the firewall 192.168.1.1 as its Default
Gateway
3. The VPN Router will use these Static Routes
192.168.0.0 Mask 255.255.255.0 192.168.0.3
192.168.2.0 Mask 255.255.255.0 192.168.2.3
__________________________________________________ _______
Eastbourne:
Network ID = 192.168.2.0/24

Internet Router (firewall) = (Int)192.168.2.1(Ext)???.???.???.???
VPN Router = (Int)192.168.2.3 (Ext)???.???.???.???

1. All Hosts on the LAN will use the VPN Router 192.168.2.3 as their
Default Gateway
2. The VPN Router will use the firewall 192.168.2.1 as its Default
Gateway
3. The VPN Router will use this Static Route
192.168.0.0 Mask 255.255.0.0 192.168.1.6

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

....I'm also assuming the topology is like this:

London <--->Brighton <--->Eastbourne
*.0.3 <--*.1.3
*.1.6 --> *.2.3


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

In Brighton,
*Both* VPN Routers will use the firewall 192.168.1.1 as thier Default
Gateway

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Alright I knew this would happen when I have to go guessing about
everything. I need to re-do Brighton. Heck, I'll probably change something
else again before it is over.

It should look like this:

Brighton:
Network ID = 192.168.1.0/24
Internet Router (firewall) = (Int)192.168.1.1(Ext)???.???.???.???
VPN Router #1 = (Int)192.168.1.3 (Ext)???.???.???.???
VPN Router #2 = (Int)192.168.1.6 (Ext)???.???.???.???

1. All Hosts on the LAN will use *either* VPN Router as their
Default Gateway,..but let's choose 192.168.1.3
2. Both VPN Routers will use the firewall VPN as the
Default Gateway
3. The VPN Router#1 will use these Static Routes
192.168.0.0 Mask 255.255.255.0 192.168.0.3
192.168.2.0 Mask 255.255.255.0 192.168.1.6
4. The VPN Router#2 will use these Static Routes
192.168.0.0 Mask 255.255.255.0 192.168.1.3
192.168.2.0 Mask 255.255.255.0 192.168.2.3