Clients can ping but VPN server and VPN joiner can not!

[shudson]

Hi there,

I’m currently evaluating WinGate-VPN as an alternative to Microsoft’s RRAS. I have set up a test network as follows (using your 'Configuration Guide'): -

Main Office LAN 192.168.1.0 (mask 255.255.255.0)
WinGate VPN Server (Windows 2003) LAN NIC 192.168.1.8
WinGate VPN Server Internet NIC aaa.bbb.ccc.ddd (Permanent Internet connection)
No Windows Firewall
Windows XP Pro Clients with Static Route to Branch office 192.168.3.0 mask 255.255.255.0 192.168.1.8



Branch Office LAN 192.168.3. 0 (mask 255.255.255.0)
WinGate VPN Joiner (Windows 2003) LAN NIC 192.168.3.8
WinGate VPN Joiner Internet NIC www.xxx.yyy.zzz (Permanent Internet connection)
No Windows Firewall
Windows XP Pro Clients with Static Route to Main office 192.168.1.0 mask 255.255.255.0 192.168.3.8

This all works fine in that all Windows XP Pro Clients can ping each other through the tunnel. The problem is that the WinGate VPN Server and the WinGate VPN Joiner can not ping anything on the other side of the tunnel

Is this how it should be? Can I not use the WinGate VPN Server and the WinGate VPN Joiner computers for other tasks that require access to the other LAN?

[genie]

Those statis routes might be the cause of the problem. Try removing them from boths sides and reconnect Wingate VPN.

[adrien]

Just to clarify, you didn't add any static routes to the WinGate VPN joiner or hoster did you? They are correct on the client machines (which will be why it works for them), but those routes are effectively automatically created by WinGate VPN itself for the joiner and hoster.

Adrien

[shudson]

Hi All,

Thanks for such quick feedback, The static routes are only on the Clients (behind the WinGate Host and Joiner).
There are no static routes to the WinGate Host and Joiner
If I use 'Route Print' on the WinGate Host or Joiner, I see no route to the remote LAN, I guess thats why they can't access/ping them? But what needs to be set in terms of routes etc. on the WinGate Host or Joiner for them to 'see' the remote LAN?

Currently the Default Gatway of the WinGate Host or Joiner computers are set to their respective Internet routers, I really need this for Internet access, particularly in the 'Branch Office' (WinGate Joiner)

Best regards shudson