MS-VPN and local printing

Our internal neworks are 192.168.1.x and 2.x at remote site.

While home users are connected to the MS-VPN through a standard high-speed
router (like Linksys or DLink, etc.) local printers are not connected. I
assume this is the VPN grabbing the default 192.168.1.x local DHCP network
addresses and trying to route them on the LAN. I changed my home network to
a 10.x.x.x configuration and all is well, no troubles. I also assume that
direct cable/DSL router connections will work as they are not typically 192
networks.

I'd rather not force configuration of all staff's home networks to a class A
network to enable printing from the VPN. I also do not want to allow local
LAN access and open up home networks to the LAN or use printer sharing apps.

Any recommended server configurations to do this?

Thx!


cchcc

posting the result of routing table here may help.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"cchcc" <(E-Mail Removed)> wrote in message
news:05928FE8-287C-4152-A29C-(E-Mail Removed)...
> Our internal neworks are 192.168.1.x and 2.x at remote site.
>
> While home users are connected to the MS-VPN through a standard high-speed
> router (like Linksys or DLink, etc.) local printers are not connected. I
> assume this is the VPN grabbing the default 192.168.1.x local DHCP network
> addresses and trying to route them on the LAN. I changed my home network
> to
> a 10.x.x.x configuration and all is well, no troubles. I also assume that
> direct cable/DSL router connections will work as they are not typically
> 192
> networks.
>
> I'd rather not force configuration of all staff's home networks to a class
> A
> network to enable printing from the VPN. I also do not want to allow
> local
> LAN access and open up home networks to the LAN or use printer sharing
> apps.
>
> Any recommended server configurations to do this?
>
> Thx!

I pulled this from the VPN server while connected at home:
================================================== ===
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.248 10
68.50.158.252 255.255.255.255 192.168.1.1 192.168.1.248 10
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.248 192.168.1.248 10
192.168.1.15 255.255.255.255 192.168.1.40 192.168.1.40 1
192.168.1.40 255.255.255.255 127.0.0.1 127.0.0.1 50
192.168.1.248 255.255.255.255 127.0.0.1 127.0.0.1 10
192.168.1.255 255.255.255.255 192.168.1.248 192.168.1.248 10
224.0.0.0 240.0.0.0 192.168.1.248 192.168.1.248 10
255.255.255.255 255.255.255.255 192.168.1.248 192.168.1.248 1
Default Gateway: 192.168.1.1
================================================== ===
Persistent Routes:
None

"Robert L. (MS-MVP)" wrote:

> posting the result of routing table here may help.
>
> --
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
> "cchcc" <(E-Mail Removed)> wrote in message
> news:05928FE8-287C-4152-A29C-(E-Mail Removed)...
> > Our internal neworks are 192.168.1.x and 2.x at remote site.
> >
> > While home users are connected to the MS-VPN through a standard high-speed
> > router (like Linksys or DLink, etc.) local printers are not connected. I
> > assume this is the VPN grabbing the default 192.168.1.x local DHCP network
> > addresses and trying to route them on the LAN. I changed my home network
> > to
> > a 10.x.x.x configuration and all is well, no troubles. I also assume that
> > direct cable/DSL router connections will work as they are not typically
> > 192
> > networks.
> >
> > I'd rather not force configuration of all staff's home networks to a class
> > A
> > network to enable printing from the VPN. I also do not want to allow
> > local
> > LAN access and open up home networks to the LAN or use printer sharing
> > apps.
> >
> > Any recommended server configurations to do this?
> >
> > Thx!
>
>

I pulled this from the VPN server while connected at home:
================================================== ===
Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.1.1
192.168.1.248 10
68.50.158.252 255.255.255.255 192.168.1.1 192.168.1.248 10
127.0.0.0 255.0.0.0 127.0.0.1
127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.248 192.168.1.248
10
192.168.1.15 255.255.255.255 192.168.1.40 192.168.1.40
1
192.168.1.40 255.255.255.255 127.0.0.1 127.0.0.1
50
192.168.1.248 255.255.255.255 127.0.0.1 127.0.0.1
10
192.168.1.255 255.255.255.255 192.168.1.248 192.168.1.248 10
224.0.0.0 240.0.0.0 1 92.168.1.248
192.168.1.248 10
255.255.255.255 255.255.255.255 192.168.1.248 192.168.1.248 1
Default Gateway: 192.168.1.1
================================================== ===
Persistent Routes:
None

"Robert L. (MS-MVP)" wrote:

> posting the result of routing table here may help.
>
> --
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
> "cchcc" <(E-Mail Removed)> wrote in message
> news:05928FE8-287C-4152-A29C-(E-Mail Removed)...
> > Our internal neworks are 192.168.1.x and 2.x at remote site.
> >
> > While home users are connected to the MS-VPN through a standard high-speed
> > router (like Linksys or DLink, etc.) local printers are not connected. I
> > assume this is the VPN grabbing the default 192.168.1.x local DHCP network
> > addresses and trying to route them on the LAN. I changed my home network
> > to
> > a 10.x.x.x configuration and all is well, no troubles. I also assume that
> > direct cable/DSL router connections will work as they are not typically
> > 192
> > networks.
> >
> > I'd rather not force configuration of all staff's home networks to a class
> > A
> > network to enable printing from the VPN. I also do not want to allow
> > local
> > LAN access and open up home networks to the LAN or use printer sharing
> > apps.
> >
> > Any recommended server configurations to do this?
> >
> > Thx!
>
>

Sorry if I didn't provide enough details or clearly explain...any help is
much appreciated.

Single domain, 2 AD sites using native W2K Srvr 2003 AD/DHCP/DNS with HP
managed switches. DHCP server for specific subnets (192.168.1.x / 2.x) active
in each site. MPLS site link through Cisco 1841 series routers. VPN server
is hosted on 1.x LAN.

Currently using MS custom single NIC VPN configuration with a PPTP NAT route
through Firebox, although I have additional NICs available if needed for this
additonal VPN subnet.

Basically I am nearly short on IP addresses in my current DHCP networks and
I am unable to spare a static range for VPN clients without reconfiguring the
network.

I'd like to use 192.168.3.x for VPN clients only, w/ communication to the
additional subnets. I can create the static 3.x range in RRAS and connect
without incident, however I am unable to communicate with anything else.

Any assistance is genuinely appreciated.

cchcc wrote:
> Sorry if I didn't provide enough details or clearly explain...any help is
> much appreciated.
>
> Single domain, 2 AD sites using native W2K Srvr 2003 AD/DHCP/DNS with HP
> managed switches. DHCP server for specific subnets (192.168.1.x / 2.x) active
> in each site. MPLS site link through Cisco 1841 series routers. VPN server
> is hosted on 1.x LAN.
>
> Currently using MS custom single NIC VPN configuration with a PPTP NAT route
> through Firebox, although I have additional NICs available if needed for this
> additonal VPN subnet.
>
> Basically I am nearly short on IP addresses in my current DHCP networks and
> I am unable to spare a static range for VPN clients without reconfiguring the
> network.
>
> I'd like to use 192.168.3.x for VPN clients only, w/ communication to the
> additional subnets. I can create the static 3.x range in RRAS and connect
> without incident, however I am unable to communicate with anything else.
>
> Any assistance is genuinely appreciated.
Well if you create a new subnet (the 192.168.3.x) to your RRAS you have
to add the routes to that subnet and if the default gateway given to the
clients when they connect has to be the RRAS so that it will pass all
packets to the other subnets