Routing problem (RRAS VPN)

Associate
Joined
29 Dec 2007
Posts
1,414
Location
London
Have a rather confusing issue, been at it a couple of hours and I'm getting no where. Would appreciate any input.

Sorry for the long read :P

Virtual machine hosted elsewhere:
Machine 1: 192.168.220.20 (RRAS Server)
Machine 2: 192.168.220.40

Office network:
Machine 3: 192.168.100.45 (Monitoring server)

VPN setup between the two networks.

Machines 1 and 2 have 2 virtual adapters each. 1 public facing and 1 which is the private network to our office via the VPN

I'm assured 100% there is no block on outgoing traffic from the virtual servers.

The monitoring server (3) is successfully monitoring everything on the local subnet and everything successfully on the remote subnet excluding machine 1.

I'm actually looking into why active checks aren't working on machine 3 but for now we'll just look at ping.

Pinging office machine 3 from machine 2 - Using wireshark I can see packets will leave machine 2, hit machine 1 and then vanish down the private network - the next trace is at the office FW, this works fine.

But when pinging machine 3 from machine 1 the packet will be sent on the public adapter and recieves a message back with host not found (obviously 192.168.100.45 isn't going to be found on the internet)

I have a static route setup on machine 2 (192.168.220.40) as so:
Persistent Routes:
Code:
  Network Address          Netmask  Gateway Address  Metric
    192.168.100.0    255.255.255.0   192.168.220.20       1

I assume with machine 1 being the RRAS server (it was setup before I joined the company) it doesn't need a persistent route adding as the RRAS setup will have taken care of it. I'm very afraid of adding in a persistant route like above as I manage the server via RDP. Don't want all my traffic to stop!

I've added a persistent route to machine 1:
route add 192.168.100.45 mask 255.255.255.255 192.168.220.20 METRIC 1 IF 0x10005

0x10005 is the private network adapter.

This seems to stops all traffic destined for machine 3 from the entire .220 subnet.

Question is, what the heck have I missed which is routing traffic from machine 1 destined for the .100 subnet via the public adapter?

Thanks guys
 
Can I get a bump on this, it's still confusing the heck out of me and it's stopping me rolling out the entire new monitoring system :(

I'll take any rough pointers in direction!
 
Back
Top Bottom