RRAS - Client Routes

Hello,

I have a VPN client that connects to our RRAS server successfully. The
client is set to not use the VPN as it's default gateway. The client
receives an ip address of 10.18.0.x (x= 100 to 200), mask 255.255.255.0

After connecting, the client has a route for the entire 10.x.x.x network
(10.0.0.0/24), and not just for the 10.18.0.x network.

This is bad, because the external client's internal network is also using
the 10.x private address space. (10.0.0.0/8)

So after connecting to our VPN, the client can not longer access their own
personal network.

I have checked out the following article:
http://support.microsoft.com/?kbid=254231 which explains that when the
client is not using the VPN as the default gateway, a route is added based
on the ip address assigned by the vpn.

We are assigning ip addresses of 10.18.0.x, mask 255.255.255.0, which tells
me a route should be added for 10.18.0.0/8 but a route is being added for
10.0.0.0/24.

Relevant Info:
My Network: 10.18.0.0/8
* DHCP Assigned ip's: 10.18.0.x (100-200)
Client Internal Network 10.0.0.0/8
Windows XP client
Windows Server 2000 RRAS server


How do I stop the client from adding this route?

Thanks for the help

Steve

I think you are stuck. The subnet mask is set up by the client, and is
based purely on the IP address it receives. So a 10.x.y.z address will
always get an eight bit mask.

You will probably need to change the netmask on the local LAN to
something like 255.255.255.0 . As it is, all IP addresses starting with 10.
are local, so they will never be routed anywhere!

"Steve Lutz" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello,
>
> I have a VPN client that connects to our RRAS server successfully. The
> client is set to not use the VPN as it's default gateway. The client
> receives an ip address of 10.18.0.x (x= 100 to 200), mask 255.255.255.0
>
> After connecting, the client has a route for the entire 10.x.x.x network
> (10.0.0.0/24), and not just for the 10.18.0.x network.
>
> This is bad, because the external client's internal network is also using
> the 10.x private address space. (10.0.0.0/8)
>
> So after connecting to our VPN, the client can not longer access their own
> personal network.
>
> I have checked out the following article:
> http://support.microsoft.com/?kbid=254231 which explains that when the
> client is not using the VPN as the default gateway, a route is added based
> on the ip address assigned by the vpn.
>
> We are assigning ip addresses of 10.18.0.x, mask 255.255.255.0, which
> tells
> me a route should be added for 10.18.0.0/8 but a route is being added for
> 10.0.0.0/24.
>
> Relevant Info:
> My Network: 10.18.0.0/8
> * DHCP Assigned ip's: 10.18.0.x (100-200)
> Client Internal Network 10.0.0.0/8
> Windows XP client
> Windows Server 2000 RRAS server
>
>
> How do I stop the client from adding this route?
>
> Thanks for the help
>
> Steve
>
>
>
>
>
>
>
>
>