by adrien » Feb 24 04 8:05 am
Hi
Basically if you have one client on your LAN able to communicate with the server, then in order to get the other machines on that LAN to connect through to the server on your other network, it becomes a routing configuration and licensing issue. Firstly you need to be using a license bigger than a 1 LAN-user license/ remote client license on the client side)
Then i order for the rest of a LAN to use a VPN gateway, the routes for that LAN need to be exported in the WinGate VPN client machine. This is done by editing the VPN configuration for that joined VPN, and selecting the option "local network". This will then publish routes over the VPN for your whole LAN. This allows machines on the other side of the VPN to send packets back to your LAN machines. The other side of the coin is then that you need to make sure that your local LAN machines know that to get to the server on the other network, that they need to go through the local VPN gateway.
This is achieved by routing configuration.
So your LAN machines need a route to tell them that the distant network is available if they use the local WinGate VPN machine as a router.
As an example, say on network 1 (VPN server), you have the addresses 192.168.0.X in use, and on network 2 (VPN client) you are using the addresses 192.168.1.X, and that the VPN Client machine has the address 192.168.1.1
Then if you had another machine on the client LAN whose IP address was say 192.168.1.2, then for it to communicate with the 192.168.0.X subnet, it would need a route that looked like
Network address: 192.168.0.0
MASK: 255.255.255.0
Gateway: 192.168.1.1
You can create such a route manually with the command
"route add -p 192.168.0.0 MASK 255.255.255.0 192.168.1.1"
or if you prefer, you can install the Qbik RIP v2 client on the machines on your LAN that need to use the VPN. This software automatically creates the necessary routes based on information that is broadcast by the RIP2 sender in WinGate VPN.
Don't install the RIP2 client on the WinGate VPN machine though.
Hope this helps.
Adrien