VPN ok, can only ping public ip in ISA server

[gensan]

Can anybody assist please. Here's the scenario.

Central Office (CO)
Win2k, ISA Server, 2 NICS (one internal-LAN, the other external-WAN connected to internet via DSL).

Location (Loc)
Win2k, Dial-Up connection to internet.

Loc dials to internet. Once connected, creates a VPN connection to CO thru the external nic on the ISA server. VPN connects ok, but can not ping other computer in the network. Loc only able to ping the ip add of the external NIC.

From the looks of it, the 2 NICS does not route to each other. But users in the LAN can browse to the internet.

Where should I start looking at what settings.

Appreciate any kind of help. Thanks in advance.

Gensan

 

[ChicagoTechNet]

quoted from

http://www.chicagotech.net

Can't access the remote network from VPN clients

Symptoms: Your VPN client can ping/access the server but not other computers in the remote network.

Resolutions: 1) if you have two NICs in the VPN server, you may need to enable IP Routing. To do this, go to the RRAS>the Properties of the server>IP, check IP Routing.
2) Make sure you don't uncheck Use the remote default gateway on VPN client's VPN connection.
3) Make sure VPN client's LAN and the remote LAN are using the different IP range and subnet.
4) Check routing table for troubleshooting.


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[gensan]

Thanks Robert. I already checked these settings from chicagotech.net and so far they're ok.

VPN is already up and working with other locations with the same settings as this problematic location. The only difference is their assigned static IP. The LAT on the RRAS contains the IP range for this location.

CO has x.x.1.0 wiht 255.255.255.0
All locations use x.x.2.0 with 255.255.255.0

There may be other settings that I have missed. My engineer is now on the location to check. I'll keep you posted on the findings.

Thanks for the reply

gensan