VPN IP addresses

I set up VPN on one of my servers and now I find that even with no clients
connected, it's pulling multiple IP addresses from my DHCP server. So many in
fact that it's using up the pool so none are left for local DHCP clients.

How can I change the VPN server so that it only pulls one address from the
DHCP server?

"JonathanL" <(E-Mail Removed)> wrote in message
news:45D6E665-2C27-4211-9DD7-(E-Mail Removed)...
> I set up VPN on one of my servers and now I find that even with no clients
> connected, it's pulling multiple IP addresses from my DHCP server. So many
> in
> fact that it's using up the pool so none are left for local DHCP clients.
>
> How can I change the VPN server so that it only pulls one address from the
> DHCP server?

The only way to ensure that the VPN server does not grab a heap of
addresses from DHCP is to give it its own static pool of addresses.

The VPN server needs a pool of addresses, not just one for itself. When
remote clients connect they get their network config (including IP address)
from the VPN server as part of the PPP negotiation. If it does not have a
static pool for this it leases a bunch of IPs from DHCP. IF you have lots of
ports configured it will grab a large pool of addresses.

Bill, thank you very much. That cleared up the entire issue for me.

Jonathan

"Bill Grant" wrote:

>
>
> "JonathanL" <(E-Mail Removed)> wrote in message
> news:45D6E665-2C27-4211-9DD7-(E-Mail Removed)...
> > I set up VPN on one of my servers and now I find that even with no clients
> > connected, it's pulling multiple IP addresses from my DHCP server. So many
> > in
> > fact that it's using up the pool so none are left for local DHCP clients.
> >
> > How can I change the VPN server so that it only pulls one address from the
> > DHCP server?
>
> The only way to ensure that the VPN server does not grab a heap of
> addresses from DHCP is to give it its own static pool of addresses.
>
> The VPN server needs a pool of addresses, not just one for itself. When
> remote clients connect they get their network config (including IP address)
> from the VPN server as part of the PPP negotiation. If it does not have a
> static pool for this it leases a bunch of IPs from DHCP. IF you have lots of
> ports configured it will grab a large pool of addresses.
>
>
>

"JonathanL" <(E-Mail Removed)> wrote in message news:6B2DE073-DB89-476D-BDF4-(E-Mail Removed)...
> Bill, thank you very much. That cleared up the entire issue for me.
>
> Jonathan

RRAS will take blocks of 10 IPs at a time as needed. You can also keep it DHCP and change the default in the registry, if you want. Check out this article for more info:
http://msmvps.com/blogs/robwill/arch...p-options.aspx


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
(E-Mail Removed)

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right things." - Peter F. Drucker
http://twitter.com/acefekay

Thanks for the info Ace, but I went ahead and made it static with a new range
of IPs and it's working fine.

Jonathan

"Ace Fekay [Microsoft Certified Trainer]" wrote:

> "JonathanL" <(E-Mail Removed)> wrote in message news:6B2DE073-DB89-476D-BDF4-(E-Mail Removed)...
> > Bill, thank you very much. That cleared up the entire issue for me.
> >
> > Jonathan
>
> RRAS will take blocks of 10 IPs at a time as needed. You can also keep it DHCP and change the default in the registry, if you want. Check out this article for more info:
> http://msmvps.com/blogs/robwill/arch...p-options.aspx
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> Microsoft Certified Trainer
> (E-Mail Removed)
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> "Efficiency is doing things right; effectiveness is doing the right things." - Peter F. Drucker
> http://twitter.com/acefekay
>
>
>
>
>

"JonathanL" <(E-Mail Removed)> wrote in message newsE444115-4818-429D-B80C-(E-Mail Removed)...
> Thanks for the info Ace, but I went ahead and made it static with a new range
> of IPs and it's working fine.
>
> Jonathan

NOoproblem, Jonathan. I just thought to post an alternate method.

Cheers!

Ace