Problem with a VPN an a ICS

Hi all...

I have LAN 1 with Windows Server 2003 with VPN server configured, using RRAS.

I have LAN 2 also with Windows Server 2003 but with ICS to share Internet to
LAN computers. I have added in this server a VPN connection to LAN 1 server.
When that connection is established, LAN 2 client computers lost Internet
connection.

I have seen routing table after VPN connected and I saw that a default route
(0.0.0.0) was added at the top of the list with metric 1. This new entry has
as gateway the LAN 1 Server private address (172.16.0.1). The ICS default
routing was moved to the second place in the list and with metric 2. Since
both entries are default routes (0.0.0.0) the one with metric 1 is used, so,
LAN 2 client computers try to go Internet through that gateway which
obviously is not possible.

How can I make the VPN connection to have a different metric? Is it
possible? How can I make VPN client connection and ICS work together?

Please, don't recommend to use RRAS instead of ICS at LAN 2 since RRAS
cannot work with my architecture.

Thanks a lot
Jaime

And I'm wondering why you have so bad memory. Don't remember that I am the
person who has posted a lot of question regarding RRAS configuration? since
I have a DSL router which I cannot manage, I couldn't configure RRAS. Well...
that is another story.

The fact is that I know where the problem is. What I don't know is the
solution.

At LAN 2, if I use tracert, obviously trafic stops at LAN 2 server because
of the routing table entry that was added when VPN connection was
established. The solution could be to modify default route metric, but I want
to know if I can do this automatically when VPN is connected.

Jaime



"Robert L [MS-MVP]" wrote:

> I am wondering why "RRAS cannot work with my architecture"? Any way, you may need to modify the routing table. also do you have routers in both sites? use tracert command to trace where the traffic stop. or posting the results of both VPN servers' routing table here may help.
>
> For more and other information, go to http://howtonetworking.com.
>
> Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
>
> "Jaime Stuardo" <(E-Mail Removed)> wrote in message news:324D60BC-7A8E-4635-8C0D-(E-Mail Removed)...
> Hi all...
>
> I have LAN 1 with Windows Server 2003 with VPN server configured, using RRAS.
>
> I have LAN 2 also with Windows Server 2003 but with ICS to share Internet to
> LAN computers. I have added in this server a VPN connection to LAN 1 server.
> When that connection is established, LAN 2 client computers lost Internet
> connection.
>
> I have seen routing table after VPN connected and I saw that a default route
> (0.0.0.0) was added at the top of the list with metric 1. This new entry has
> as gateway the LAN 1 Server private address (172.16.0.1). The ICS default
> routing was moved to the second place in the list and with metric 2. Since
> both entries are default routes (0.0.0.0) the one with metric 1 is used, so,
> LAN 2 client computers try to go Internet through that gateway which
> obviously is not possible.
>
> How can I make the VPN connection to have a different metric? Is it
> possible? How can I make VPN client connection and ICS work together?
>
> Please, don't recommend to use RRAS instead of ICS at LAN 2 since RRAS
> cannot work with my architecture.
>
> Thanks a lot
> Jaime

I am wondering why "RRAS cannot work with my architecture"? Any way, you may need to modify the routing table. also do you have routers in both sites? use tracert command to trace where the traffic stop. or posting the results of both VPN servers' routing table here may help.

For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Jaime Stuardo" <(E-Mail Removed)> wrote in message news:324D60BC-7A8E-4635-8C0D-(E-Mail Removed)...
Hi all...

I have LAN 1 with Windows Server 2003 with VPN server configured, using RRAS.

I have LAN 2 also with Windows Server 2003 but with ICS to share Internet to
LAN computers. I have added in this server a VPN connection to LAN 1 server.
When that connection is established, LAN 2 client computers lost Internet
connection.

I have seen routing table after VPN connected and I saw that a default route
(0.0.0.0) was added at the top of the list with metric 1. This new entry has
as gateway the LAN 1 Server private address (172.16.0.1). The ICS default
routing was moved to the second place in the list and with metric 2. Since
both entries are default routes (0.0.0.0) the one with metric 1 is used, so,
LAN 2 client computers try to go Internet through that gateway which
obviously is not possible.

How can I make the VPN connection to have a different metric? Is it
possible? How can I make VPN client connection and ICS work together?

Please, don't recommend to use RRAS instead of ICS at LAN 2 since RRAS
cannot work with my architecture.

Thanks a lot
Jaime