VPN client IP range same as server

[frenchpeter]

Wonder if you can help a person with limited network skills.

If a client machine with an IP address of e.g. 192.168.1.nn uses VPN via a Cisco PIX to contact server within same network range it can make the secure connection but cannot do much else - cannot even ping an IP address. I have got round this problem by changing the network at my home in France to another range e.g. 192.168.0.nn. Everything then works - I can access the network at the UK office and, by utilising PCAnywhere can remotely control required computers/programs. This works for me because I never have to connect any of my machines directly to the network at the UK site.

However, the CEO of the business has a portable computer which he needs to connect directly to the network in the office but also to use via VPN from home to achieve the same functionality as I enjoy. I have proved that the 'fix' that I have used in France gives that functionality on his dial-up from home to his ISP but obviously he does not wish to get involved changing the IP address of his machine on each change of location. Is there a more elegant solution (where 'elegant' equates to less work for the boss!)

All client machines are on Windows 98 and the PIX authenticates through the RADIUS on the NT4 server. The network address subset is always 255.255.255.0 on all of the machines involved.

 

[ChicagoTechNet]

in this case, you can change the cisco VPN IP range instead of home IP.

Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[frenchpeter]

Sorry, this does not seem appropriate. The essence of the IP address range behind the PIX being the same as the CEO's portable is that he can connect direct to the network when in the office. So, unless I am missing a trick here, if I change the IP range of the network he will be unable to do this with the different IP range component on his portable apparently needed to use the client VPN to work from home on that same machine.

 

[bytehd]

ip client pools on the PIX

http://www.insyncva.com

 

[lgarner]

I have a DHCP range set up for laptops in the office. When they're not in the office, they don't get the address, no conflict.

You might want to change your IP scheme to something more obscure, like 192.168.189.x to help avoid common conflicts with broadband routers.