Hi all,
Hoping for some help.
I have Fedora linux box running poptop/pptpd
as a server for a VPN.. I'm using a WinXP client machine to connect over a
firewall to this pptpd server.. All is well with the connection and
routing if I have "use default gateway" checked on the Windows XP box for the
VPN connection.. All my traffic is routed over the
VPN.. which is the way it should function.
However, my goal here is to use the VPN to allow
remote access to my Windows XP machine through this VPN connection while still
keeping the normal default gateway intact.. I'm told this is called
Split Tunneling so I can access both my Intranet and the Internet at the same
time..
Here are the specifics:
(linux server)
- 216.53.188.249-254 I'm
using 216.53.188.250 as the PPTPD bound IP (server side of the VPN)
(WindowsXP client)
- 216.53.188.251 is the IP given
to a client when it connects..
Since I have the "use default gateway on remote
network" NOT checked.. Windows sets up a route
of:
216.53.188.0 255.255.255.0
Gateway of 216.53.188.251
and I am able to PING the .250 address on the
remote side as well as the other hosts on that network..
However I can not reach the VPN's client from the
Internet when going through the server. my trace stops
at 216.53.188.249
This will however work fine if default gateway is
checked when the client connects to the VPN server. So this tells me the
server is setup correctly and routing works fine.. only
when I turn off the default gateway on the client does this routing problem come
up.
Does anyone know what routes I'd need to manual add
to get this to work? I'm told I'd need to add the routes on the client
side.. but when I try, windows complains that the gateway doesnt' match
the network and mask I'm trying to use.. Here is the route tables for both
the server and the windows client after a VPN connection is made:
LINUX SERVER
Kernel IP routing
table
Destination
Gateway
Genmask Flags Metric
Ref Use Iface
vpn1.stopspammi
*
255.255.255.255 UH 0
0 0
ppp0
216.53.188.0
*
255.255.255.0 U
0 0 0
eth0
169.254.0.0
*
255.255.0.0 U
0 0 0
eth0
default
216.53.188.1
0.0.0.0 UG
0 0 0
eth0
(keep in mind that hostname
vpn1.stopspammi is just a hostname that would be resolved as
216.53.188.251)
Windows CLIENT
Active Routes:
Network
Destination
Netmask
Gateway Interface
Metric
0.0.0.0
0.0.0.0 172.25.167.1
172.25.167.121
20
127.0.0.0
255.0.0.0
127.0.0.1
127.0.0.1 1
172.25.167.0 255.255.255.0 172.25.167.121
172.25.167.121 20
172.25.167.121 255.255.255.255
127.0.0.1
127.0.0.1 20
172.25.255.255 255.255.255.255 172.25.167.121
172.25.167.121
20
216.53.188.0
255.255.255.0 216.53.188.251
216.53.188.251 1
216.53.188.250 255.255.255.255 172.25.167.1
172.25.167.121 20
216.53.188.251 255.255.255.255
127.0.0.1
127.0.0.1 50
216.53.188.255 255.255.255.255 216.53.188.251
216.53.188.251
50
224.0.0.0 240.0.0.0
172.25.167.121 172.25.167.121
20
224.0.0.0 240.0.0.0
216.53.188.251 216.53.188.251
50
255.255.255.255 255.255.255.255
172.25.167.121 172.25.167.121
1
255.255.255.255 255.255.255.255
216.53.188.251 216.53.188.251
1
Default Gateway:
172.25.167.1
===========================================================================
I just can't make sense of all this..
My question is.. When the VPN is connected I
can ping between the 2 inferfaces (the vpn server side and the client
side).. and I can access IPs on the servers lan from the
client.. but no one from outside on the
Internet can route through the internet to the vpn server,.... OVER the VPN to
the client..
Do you know if this would be a route needed to be
added to the client, server, both or is something else the cause?
Thanks for looking,
Ron
RSS Feed