Client VPN error of default bridge

Hello people,

i have just setup a new VPN network on windows 2003 R2 with the "routing &
remote access"

based on the "template" VPN & NAT server


So the VPN connection can be established Between the client and the host.
but on the client i cant surf on the web even i check this case ->
http://www.cytek.be/TE/VPN-BUG/tcp.gif




i have setup on the host this Static address pool for the VPN user

start: 195.195.120.20
end: 195.195.120.29
mean 10 connection

the local IP for the host is 195.195.120.1 (on the private Real NIC)
the local IP for the host is 195.195.120.20 (on the VPN (PPP adapter RAS
server (dial in)))


When i try a ping between client and host its not working !! (on
195.195.120.1 & 195.195.120.1 & 195.195.120.22)



when i do a IPCONFIG on the client i have got this (for the vpn virtual NIC)

IP: 195.195.120.22
mask 255.255.255.255 (why ? can i have a 255.255.255.0 mask ?)
default bridge = 195.195.120.22 !!!! normally is must be 195.195.120.1 or
195.195.120.20 no ?
how correct this ?

Thank a lot people :-)




James

The VPN client mask and default gateway are OK. Can you ping 195.195.120.20? If not, I would check firewall first. Also why do you use 195.195.120.x for your private IP range?

tcp/ip settings for vpn Why does my VPN server or client PPP adapter have 169.xxx IP Why my XP VPN client's subnet mask is 255.255.255.255 Why my XP VPN client's IP is the same as ...
www.chicagotech.net/vpntcpipsettings.htmn


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"James" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
Hello people,

i have just setup a new VPN network on windows 2003 R2 with the "routing &
remote access"

based on the "template" VPN & NAT server


So the VPN connection can be established Between the client and the host.
but on the client i cant surf on the web even i check this case ->
http://www.cytek.be/TE/VPN-BUG/tcp.gif




i have setup on the host this Static address pool for the VPN user

start: 195.195.120.20
end: 195.195.120.29
mean 10 connection

the local IP for the host is 195.195.120.1 (on the private Real NIC)
the local IP for the host is 195.195.120.20 (on the VPN (PPP adapter RAS
server (dial in)))


When i try a ping between client and host its not working !! (on
195.195.120.1 & 195.195.120.1 & 195.195.120.22)



when i do a IPCONFIG on the client i have got this (for the vpn virtual NIC)

IP: 195.195.120.22
mask 255.255.255.255 (why ? can i have a 255.255.255.0 mask ?)
default bridge = 195.195.120.22 !!!! normally is must be 195.195.120.1 or
195.195.120.20 no ?
how correct this ?

Thank a lot people :-)

Hi,

No i cant ping 195.195.120.20 (VPN IP of host)

(i have of course deactived all firewall for do a ping)


you say the

IP:195.195.120.22
Mask:255.255.255.255
gateway:195.195.120.22

is good for the VPN client

but with this gateway (himself) i dont think the client will be enable to
surf on the web ? no ?

James wrote:
> Hi,
>
> No i cant ping 195.195.120.20 (VPN IP of host)
>
> (i have of course deactived all firewall for do a ping)
>
>
> you say the
>
> IP:195.195.120.22
> Mask:255.255.255.255
> gateway:195.195.120.22
>
> is good for the VPN client
>
> but with this gateway (himself) i dont think the client will be
> enable to surf on the web ? no ?

You can if the RAS server allows you to have Internet Access. If you will
clear the "Use default gateway on the remote network" on the VPN connection,
the client will use its own default gateway to get to the internet.
Another problem with many VPN networks, is the clients local network using
the same subnet as the RAS server, which causes a routing conflict from
having two interfaces on the same subnet on the same machine (creates two
gateways in the routing table for the same network address).

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Hi thank for you reply

"if the RAS server allows you to have Internet Access"

But how setup the RAS server (windows 2003) to enable this fonction ?

Thx a lot ;-)


"Kevin D. Goodknecht Sr. [MVP]" <(E-Mail Removed)> a écrit dans le
message de news: (E-Mail Removed)...
> James wrote:
>> Hi,
>>
>> No i cant ping 195.195.120.20 (VPN IP of host)
>>
>> (i have of course deactived all firewall for do a ping)
>>
>>
>> you say the
>>
>> IP:195.195.120.22
>> Mask:255.255.255.255
>> gateway:195.195.120.22
>>
>> is good for the VPN client
>>
>> but with this gateway (himself) i dont think the client will be
>> enable to surf on the web ? no ?
>
> You can if the RAS server allows you to have Internet Access. If you will
> clear the "Use default gateway on the remote network" on the VPN
> connection,
> the client will use its own default gateway to get to the internet.
> Another problem with many VPN networks, is the clients local network using
> the same subnet as the RAS server, which causes a routing conflict from
> having two interfaces on the same subnet on the same machine (creates two
> gateways in the routing table for the same network address).
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>