Routing between 2 local subnets with W2K server?

Hi,

Is it possible to configure W2K server so that it behaves like a router? For
example if i have 2 subnets, one on 10.4.60.0 and the other on 10.20.100.0,
will it pass packets from one to the other? I dont seem to be able to get it
to work.

I have 2 NICs in my w2k server that im using as a router. NIC1 has the ip
address 10.4.60.240 with a gateway of 10.4.60.1 (this gateway is a cisco
router and this is connected to the "live" network i.e. has internet access)
NIC2 has the ip address 10.20.100.1 (this has no gateway) and is connected to
a single hub that has 1 test server connected to it. This test server has the
ip address of 10.20.100.228 with a gateway of 10.20.100.1 (this is the ip
address of NIC2 on the W2K server router), which i want to be able to connect
through to the 10.4.60.0 network via the router.

Here is the problem, from this test server the only device i can ping or
access on the 10.4.60.0 network is NIC1 of the W2K server router
(10.4.60.240) and nothing else!

I hope how i have explained things makes sense to someone? Does anyone know
what I am doing wrong?

Any help or advice would be great!

Cheers


Wrighty

You have to use RRAS (Routing and Remote Access Service).
RRAS is the "routing software" for Windows 2000 and newer,...NT4.0 (both
Server and Workstation) could do it without RRAS although there was a
downloadable old version of RRAS that could be added to NT4.0 (Server only)
that would expand the abilities of what could be done.

There was supposed to be a way to hack the registry to run routing on 2000
and newer without RRAS, but to me it isn't worth the trouble. It was more
commonly done on Windows 2000 Professional or XP Pro that could not have
RRAS installed.

It is not likely that you will use any "routing protocols", so don't bother
messing with those. Simple routing is all you need.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/e...epartners.mspx
-----------------------------------------------------

"Wrighty" <(E-Mail Removed)> wrote in message
news:CC14F093-3081-42E7-840B-(E-Mail Removed)...
> Hi,
>
> Is it possible to configure W2K server so that it behaves like a router?
> For
> example if i have 2 subnets, one on 10.4.60.0 and the other on
> 10.20.100.0,
> will it pass packets from one to the other? I dont seem to be able to get
> it
> to work.
>
> I have 2 NICs in my w2k server that im using as a router. NIC1 has the ip
> address 10.4.60.240 with a gateway of 10.4.60.1 (this gateway is a cisco
> router and this is connected to the "live" network i.e. has internet
> access)
> NIC2 has the ip address 10.20.100.1 (this has no gateway) and is connected
> to
> a single hub that has 1 test server connected to it. This test server has
> the
> ip address of 10.20.100.228 with a gateway of 10.20.100.1 (this is the ip
> address of NIC2 on the W2K server router), which i want to be able to
> connect
> through to the 10.4.60.0 network via the router.
>
> Here is the problem, from this test server the only device i can ping or
> access on the 10.4.60.0 network is NIC1 of the W2K server router
> (10.4.60.240) and nothing else!
>
> I hope how i have explained things makes sense to someone? Does anyone
> know
> what I am doing wrong?
>
> Any help or advice would be great!
>
> Cheers

Thanks for the reply.

Sorry, i forgot to mention in my post that i have installed RRAS.

I assumed that if any devices on the 10.20.100.0 network had their default
gateway set to the ip address of NIC2 on W2K Router (10.20.100.1) then it
(the W2K Router) would automatically forward those packets onto NIC1 on the
W2K Router (10.4.60.1) and gain access to devices on that subnet?? Am i
missing something obvious here or do i need to do something else to make this
work?

Cheers

"Phillip Windell" wrote:

> You have to use RRAS (Routing and Remote Access Service).
> RRAS is the "routing software" for Windows 2000 and newer,...NT4.0 (both
> Server and Workstation) could do it without RRAS although there was a
> downloadable old version of RRAS that could be added to NT4.0 (Server only)
> that would expand the abilities of what could be done.
>
> There was supposed to be a way to hack the registry to run routing on 2000
> and newer without RRAS, but to me it isn't worth the trouble. It was more
> commonly done on Windows 2000 Professional or XP Pro that could not have
> RRAS installed.
>
> It is not likely that you will use any "routing protocols", so don't bother
> messing with those. Simple routing is all you need.
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Troubleshooting Client Authentication on Access Rules in ISA Server 2004
> http://download.microsoft.com/downlo...7/ts_rules.doc
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Microsoft ISA Server Partners: Partner Hardware Solutions
> http://www.microsoft.com/forefront/e...epartners.mspx
> -----------------------------------------------------
>
> "Wrighty" <(E-Mail Removed)> wrote in message
> news:CC14F093-3081-42E7-840B-(E-Mail Removed)...
> > Hi,
> >
> > Is it possible to configure W2K server so that it behaves like a router?
> > For
> > example if i have 2 subnets, one on 10.4.60.0 and the other on
> > 10.20.100.0,
> > will it pass packets from one to the other? I dont seem to be able to get
> > it
> > to work.
> >
> > I have 2 NICs in my w2k server that im using as a router. NIC1 has the ip
> > address 10.4.60.240 with a gateway of 10.4.60.1 (this gateway is a cisco
> > router and this is connected to the "live" network i.e. has internet
> > access)
> > NIC2 has the ip address 10.20.100.1 (this has no gateway) and is connected
> > to
> > a single hub that has 1 test server connected to it. This test server has
> > the
> > ip address of 10.20.100.228 with a gateway of 10.20.100.1 (this is the ip
> > address of NIC2 on the W2K server router), which i want to be able to
> > connect
> > through to the 10.4.60.0 network via the router.
> >
> > Here is the problem, from this test server the only device i can ping or
> > access on the 10.4.60.0 network is NIC1 of the W2K server router
> > (10.4.60.240) and nothing else!
> >
> > I hope how i have explained things makes sense to someone? Does anyone
> > know
> > what I am doing wrong?
> >
> > Any help or advice would be great!
> >
> > Cheers
>
>
>

It would be just normal routing techniques. If this is the only LAN Router
on the LAN then it would be the Default Gateway of all the machines. They
would use the IP# of the Router that directly "faces" them. The LAN Router
itself would most likely use the Internet Device or some other LAN Router as
its Default Gateway. So everything goes to the LAN Router first and it then
in turn makes the routing decisions as to what path something should take.
Routing decisions are supposed to be made by routers, not client
machines,...and this does that. It is only rare and usual situations where
the individual Client would make a routing descision.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"Wrighty" <(E-Mail Removed)> wrote in message
news:759E34C0-5EEC-44F4-9768-(E-Mail Removed)...
> Thanks for the reply.
>
> Sorry, i forgot to mention in my post that i have installed RRAS.
>
> I assumed that if any devices on the 10.20.100.0 network had their default
> gateway set to the ip address of NIC2 on W2K Router (10.20.100.1) then it
> (the W2K Router) would automatically forward those packets onto NIC1 on
> the
> W2K Router (10.4.60.1) and gain access to devices on that subnet?? Am i
> missing something obvious here or do i need to do something else to make
> this
> work?
>
> Cheers
>
> "Phillip Windell" wrote:
>
>> You have to use RRAS (Routing and Remote Access Service).
>> RRAS is the "routing software" for Windows 2000 and newer,...NT4.0 (both
>> Server and Workstation) could do it without RRAS although there was a
>> downloadable old version of RRAS that could be added to NT4.0 (Server
>> only)
>> that would expand the abilities of what could be done.
>>
>> There was supposed to be a way to hack the registry to run routing on
>> 2000
>> and newer without RRAS, but to me it isn't worth the trouble. It was
>> more
>> commonly done on Windows 2000 Professional or XP Pro that could not have
>> RRAS installed.
>>
>> It is not likely that you will use any "routing protocols", so don't
>> bother
>> messing with those. Simple routing is all you need.
>>
>> --
>> Phillip Windell
>> www.wandtv.com
>>
>> The views expressed, are my own and not those of my employer, or
>> Microsoft,
>> or anyone else associated with me, including my cats.
>> -----------------------------------------------------
>> Understanding the ISA 2004 Access Rule Processing
>> http://www.isaserver.org/articles/IS...cessRules.html
>>
>> Troubleshooting Client Authentication on Access Rules in ISA Server 2004
>> http://download.microsoft.com/downlo...7/ts_rules.doc
>>
>> Microsoft Internet Security & Acceleration Server: Partners
>> http://www.microsoft.com/isaserver/partners/default.asp
>>
>> Microsoft ISA Server Partners: Partner Hardware Solutions
>> http://www.microsoft.com/forefront/e...epartners.mspx
>> -----------------------------------------------------
>>
>> "Wrighty" <(E-Mail Removed)> wrote in message
>> news:CC14F093-3081-42E7-840B-(E-Mail Removed)...
>> > Hi,
>> >
>> > Is it possible to configure W2K server so that it behaves like a
>> > router?
>> > For
>> > example if i have 2 subnets, one on 10.4.60.0 and the other on
>> > 10.20.100.0,
>> > will it pass packets from one to the other? I dont seem to be able to
>> > get
>> > it
>> > to work.
>> >
>> > I have 2 NICs in my w2k server that im using as a router. NIC1 has the
>> > ip
>> > address 10.4.60.240 with a gateway of 10.4.60.1 (this gateway is a
>> > cisco
>> > router and this is connected to the "live" network i.e. has internet
>> > access)
>> > NIC2 has the ip address 10.20.100.1 (this has no gateway) and is
>> > connected
>> > to
>> > a single hub that has 1 test server connected to it. This test server
>> > has
>> > the
>> > ip address of 10.20.100.228 with a gateway of 10.20.100.1 (this is the
>> > ip
>> > address of NIC2 on the W2K server router), which i want to be able to
>> > connect
>> > through to the 10.4.60.0 network via the router.
>> >
>> > Here is the problem, from this test server the only device i can ping
>> > or
>> > access on the 10.4.60.0 network is NIC1 of the W2K server router
>> > (10.4.60.240) and nothing else!
>> >
>> > I hope how i have explained things makes sense to someone? Does anyone
>> > know
>> > what I am doing wrong?
>> >
>> > Any help or advice would be great!
>> >
>> > Cheers
>>
>>
>>

Look at it this way. An IP router will forward traffic from one subnet
to the other. The critical thing is that the traffic actually gets to the
router.

In the simplest case, there is only one router and it is the default
gateway for both subnets. It just works with no extra routing. eg

192.168.1.x dg 192.168.1.254
|
192.168.1.254 dg blank
router
192.168.21.254 dg blank
|
192.168.21.x dg 192.168.21.254


If one subnet is set to use some other gateway, routing fails because
the traffic for the other "local" subnet never gets to the internal router.
It goes to the default router for the subnet (such as an Internet gateway)
and is lost.

You can solve the problem by making the router a NAT router. Everything
then works because the traffic from the "inner" subnet is using the "public"
IP of the NAT router which the Internet router nows about.

Internet
|
gateway router
192.168.1.1
|
192.168.1.x dg 192.168.1.1
|
192.168.1.254 dg 192.168.1.1
NAT router
192.168.21.254 dg blank
|
192.168.21.x dg 192.168.21.254

Traffic from 192.168.21.x machines can now see the other private
subnet and the Internet because the are using the NAT router's 192.168.1.254
address on the 192.167.1 segment.

Without NAT, you need extra routing on the 192.168.1 subnet so that it
knows how to reach the inner subnet. Something like

192.168.21.0 255.255.255.0 192.168.1.254

If you put that route on one machine in the 192.168.1 subnet, that
machine would be able to route. If you put it on the Internet gateway
router, all machines would be able to route.

"Wrighty" <(E-Mail Removed)> wrote in message
news:759E34C0-5EEC-44F4-9768-(E-Mail Removed)...
> Thanks for the reply.
>
> Sorry, i forgot to mention in my post that i have installed RRAS.
>
> I assumed that if any devices on the 10.20.100.0 network had their default
> gateway set to the ip address of NIC2 on W2K Router (10.20.100.1) then it
> (the W2K Router) would automatically forward those packets onto NIC1 on
> the
> W2K Router (10.4.60.1) and gain access to devices on that subnet?? Am i
> missing something obvious here or do i need to do something else to make
> this
> work?
>
> Cheers
>
> "Phillip Windell" wrote:
>
>> You have to use RRAS (Routing and Remote Access Service).
>> RRAS is the "routing software" for Windows 2000 and newer,...NT4.0 (both
>> Server and Workstation) could do it without RRAS although there was a
>> downloadable old version of RRAS that could be added to NT4.0 (Server
>> only)
>> that would expand the abilities of what could be done.
>>
>> There was supposed to be a way to hack the registry to run routing on
>> 2000
>> and newer without RRAS, but to me it isn't worth the trouble. It was
>> more
>> commonly done on Windows 2000 Professional or XP Pro that could not have
>> RRAS installed.
>>
>> It is not likely that you will use any "routing protocols", so don't
>> bother
>> messing with those. Simple routing is all you need.
>>
>> --
>> Phillip Windell
>> www.wandtv.com
>>
>> The views expressed, are my own and not those of my employer, or
>> Microsoft,
>> or anyone else associated with me, including my cats.
>> -----------------------------------------------------
>> Understanding the ISA 2004 Access Rule Processing
>> http://www.isaserver.org/articles/IS...cessRules.html
>>
>> Troubleshooting Client Authentication on Access Rules in ISA Server 2004
>> http://download.microsoft.com/downlo...7/ts_rules.doc
>>
>> Microsoft Internet Security & Acceleration Server: Partners
>> http://www.microsoft.com/isaserver/partners/default.asp
>>
>> Microsoft ISA Server Partners: Partner Hardware Solutions
>> http://www.microsoft.com/forefront/e...epartners.mspx
>> -----------------------------------------------------
>>
>> "Wrighty" <(E-Mail Removed)> wrote in message
>> news:CC14F093-3081-42E7-840B-(E-Mail Removed)...
>> > Hi,
>> >
>> > Is it possible to configure W2K server so that it behaves like a
>> > router?
>> > For
>> > example if i have 2 subnets, one on 10.4.60.0 and the other on
>> > 10.20.100.0,
>> > will it pass packets from one to the other? I dont seem to be able to
>> > get
>> > it
>> > to work.
>> >
>> > I have 2 NICs in my w2k server that im using as a router. NIC1 has the
>> > ip
>> > address 10.4.60.240 with a gateway of 10.4.60.1 (this gateway is a
>> > cisco
>> > router and this is connected to the "live" network i.e. has internet
>> > access)
>> > NIC2 has the ip address 10.20.100.1 (this has no gateway) and is
>> > connected
>> > to
>> > a single hub that has 1 test server connected to it. This test server
>> > has
>> > the
>> > ip address of 10.20.100.228 with a gateway of 10.20.100.1 (this is the
>> > ip
>> > address of NIC2 on the W2K server router), which i want to be able to
>> > connect
>> > through to the 10.4.60.0 network via the router.
>> >
>> > Here is the problem, from this test server the only device i can ping
>> > or
>> > access on the 10.4.60.0 network is NIC1 of the W2K server router
>> > (10.4.60.240) and nothing else!
>> >
>> > I hope how i have explained things makes sense to someone? Does anyone
>> > know
>> > what I am doing wrong?
>> >
>> > Any help or advice would be great!
>> >
>> > Cheers
>>
>>
>>

Thanks for the replies to the problem guys, the router is only for testing
anyhow so it wasn't important if it didn't work, however using NAT it does.
Now ive gotten further than i had before posting here, i shall continue
playing round with it.

Thanks again

NAT is not "routing"
NAT only goes in one direction easily, does not produce the same effect as
routing, and you aren't going to get the results you want.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"Wrighty" <(E-Mail Removed)> wrote in message
news:2528FA8B-ED86-4551-9070-(E-Mail Removed)...
> Thanks for the replies to the problem guys, the router is only for testing
> anyhow so it wasn't important if it didn't work, however using NAT it
> does.
> Now ive gotten further than i had before posting here, i shall continue
> playing round with it.
>
> Thanks again
>