Remote Access: Two different address pool

Hi,
If I assign two different address pool say 192.168.x.x and 10.0.x.x
in my Vpn server, is there a way I can control assignment of these
addresses to vpn client when they connect to the server?
i.e. I want to give the office remote location
users the 192 series and the remote home users the 10 series.

Thanks,
Glenn

Never heard of anyone trying that, but I'd say no. The client receives an
address from the subnet that the LAN Nic of the VPN Server is a member of.
To do what you ask requires 2 VPN Servers (one for each subnet) and it
requires routers between the VPN Servers and the rest of the LAN.


--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Glenn" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
> If I assign two different address pool say 192.168.x.x and 10.0.x.x
> in my Vpn server, is there a way I can control assignment of these
> addresses to vpn client when they connect to the server?
> i.e. I want to give the office remote location
> users the 192 series and the remote home users the 10 series.
>
> Thanks,
> Glenn
>
>

You might be able to work it out by assigning users static IP addresses in their user
account properties in AD users and computers. This may only work in a native mode
domain. Otherwise two VPN server could be used and Remote Access Policies could be
enforced to make sure the user accesses only the correct VPN. Take a look at Remote
Access Policies as they may be helpful in controlling access to your network. ---
Steve


"Glenn" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
> If I assign two different address pool say 192.168.x.x and 10.0.x.x
> in my Vpn server, is there a way I can control assignment of these
> addresses to vpn client when they connect to the server?
> i.e. I want to give the office remote location
> users the 192 series and the remote home users the 10 series.
>
> Thanks,
> Glenn
>
>

Hi Phillip,
This is what I'm trying to do:
Our lan has a 10.x.x.x ip subnet mask 255.0.0.0 scheme.
Exchange/Isa/vpn has the lan address and an external one.
My problem is I want vpn clients from remote location A to connect to
the exchange/isa/vpn server and at the same time access another server (ip
10.40.10.x)
on the lan. So i have added the address pool 10.x.x.x.
At the same time, I'd like to give vpn clients on remote location B
access to the exchange/isa/vpn server ONLY so I added the address
pool 192.168.x.x as well and this is our current set up. Location B is
assigned
an off subnet addresses so they can't access the lan.

If this configuration is possible, my next problem is how to set it up so
that the
address pool 192.168.x.x is assigned to location B users automatically and
the other address pool to location A users.

Thanks,
Glenn


"Phillip Windell" <@.> wrote in message
news:(E-Mail Removed)...
> Never heard of anyone trying that, but I'd say no. The client receives an
> address from the subnet that the LAN Nic of the VPN Server is a member of.
> To do what you ask requires 2 VPN Servers (one for each subnet) and it
> requires routers between the VPN Servers and the rest of the LAN.
>
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
> "Glenn" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Hi,
> > If I assign two different address pool say 192.168.x.x and 10.0.x.x
> > in my Vpn server, is there a way I can control assignment of these
> > addresses to vpn client when they connect to the server?
> > i.e. I want to give the office remote location
> > users the 192 series and the remote home users the 10 series.
> >
> > Thanks,
> > Glenn
> >
> >
>
>

I'd have to say,...just flat out not possible..., as per my original post.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"Glenn" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Phillip,
> This is what I'm trying to do:
> Our lan has a 10.x.x.x ip subnet mask 255.0.0.0 scheme.
> Exchange/Isa/vpn has the lan address and an external one.
> My problem is I want vpn clients from remote location A to connect to
> the exchange/isa/vpn server and at the same time access another server
(ip
> 10.40.10.x)
> on the lan. So i have added the address pool 10.x.x.x.
> At the same time, I'd like to give vpn clients on remote location B
> access to the exchange/isa/vpn server ONLY so I added the address
> pool 192.168.x.x as well and this is our current set up. Location B is
> assigned
> an off subnet addresses so they can't access the lan.
>
> If this configuration is possible, my next problem is how to set it up
so
> that the
> address pool 192.168.x.x is assigned to location B users automatically and
> the other address pool to location A users.
>
> Thanks,
> Glenn
>
>
> "Phillip Windell" <@.> wrote in message
> news:(E-Mail Removed)...
> > Never heard of anyone trying that, but I'd say no. The client receives
an
> > address from the subnet that the LAN Nic of the VPN Server is a member
of.
> > To do what you ask requires 2 VPN Servers (one for each subnet) and it
> > requires routers between the VPN Servers and the rest of the LAN.
> >
> >
> > --
> >
> > Phillip Windell [MCP, MVP, CCNA]
> > www.wandtv.com
> >
> >
> > "Glenn" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed)...
> > > Hi,
> > > If I assign two different address pool say 192.168.x.x and 10.0.x.x
> > > in my Vpn server, is there a way I can control assignment of these
> > > addresses to vpn client when they connect to the server?
> > > i.e. I want to give the office remote location
> > > users the 192 series and the remote home users the 10 series.
> > >
> > > Thanks,
> > > Glenn
> > >
> > >
> >
> >
>
>

Understood. . Can I add an ip static route in the Routing and Remote
Access
to give an off subnet address (192.68.1.x) vpn client access to a lan
server (10.40.10.x)?

Thanks,
Glenn


"Phillip Windell" <@.> wrote in message
news:%(E-Mail Removed)...
> I'd have to say,...just flat out not possible..., as per my original post.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
> "Glenn" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Hi Phillip,
> > This is what I'm trying to do:
> > Our lan has a 10.x.x.x ip subnet mask 255.0.0.0 scheme.
> > Exchange/Isa/vpn has the lan address and an external one.
> > My problem is I want vpn clients from remote location A to connect to
> > the exchange/isa/vpn server and at the same time access another server
> (ip
> > 10.40.10.x)
> > on the lan. So i have added the address pool 10.x.x.x.
> > At the same time, I'd like to give vpn clients on remote location B
> > access to the exchange/isa/vpn server ONLY so I added the address
> > pool 192.168.x.x as well and this is our current set up. Location B is
> > assigned
> > an off subnet addresses so they can't access the lan.
> >
> > If this configuration is possible, my next problem is how to set it up
> so
> > that the
> > address pool 192.168.x.x is assigned to location B users automatically
and
> > the other address pool to location A users.
> >
> > Thanks,
> > Glenn
> >
> >
> > "Phillip Windell" <@.> wrote in message
> > news:(E-Mail Removed)...
> > > Never heard of anyone trying that, but I'd say no. The client
receives
> an
> > > address from the subnet that the LAN Nic of the VPN Server is a member
> of.
> > > To do what you ask requires 2 VPN Servers (one for each subnet) and it
> > > requires routers between the VPN Servers and the rest of the LAN.
> > >
> > >
> > > --
> > >
> > > Phillip Windell [MCP, MVP, CCNA]
> > > www.wandtv.com
> > >
> > >
> > > "Glenn" <(E-Mail Removed)> wrote in message
> > > news:(E-Mail Removed)...
> > > > Hi,
> > > > If I assign two different address pool say 192.168.x.x and 10.0.x.x
> > > > in my Vpn server, is there a way I can control assignment of these
> > > > addresses to vpn client when they connect to the server?
> > > > i.e. I want to give the office remote location
> > > > users the 192 series and the remote home users the 10 series.
> > > >
> > > > Thanks,
> > > > Glenn
> > > >
> > > >
> > >
> > >
> >
> >
>
>

"Glenn" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Understood. . Can I add an ip static route in the Routing and Remote
> Access
> to give an off subnet address (192.68.1.x) vpn client access to a lan
> server (10.40.10.x)?

No.

According to your description you don't have a 192.168.1.x network, you only
have a 10.40.10.x network. You can not give addresses and assign routes for
a network that doesn't exist.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com