Re: Symantec 200R browse from client to remote subnet

From: Lars M. Hansen (badnews_at_hansenonline.net)
Date: 07/24/03 

Date: Thu, 24 Jul 2003 19:26:15 GMT

On 24 Jul 2003 11:57:48 -0700, Ben spoketh

>Hi
>
>I have read a few messages about similar problems to the one I am
>experiencing but have found no solutions as yet... I hope someone can
>help.
>
>I have a Symantec 200R Firewall VPN appliance, the WAN side has my
>public IP and the LAN side is connected to my multi homed Windows NT
>server on a 192.168.0.x subnet. The other NIC in my NT server is
>89.0.0.x. I have enabled routing between these subnets, yet when I
>establish a VPN connection to the 200R, I can only browse/ping hosts
>on the 192.168.0.x subnet and not the 89.0.0.x subnet. I have
>manually added a route in the 200R's routing table but it would appear
>that this is not being passed to the client (Symantec Enterprise VPN
>client 7.01) and I am unable to manually add the route to the clients
>routing table because the clients own IP will be on a different subnet
>to the 200Rs public IP.
>Any one got any ideas as to how I can browse to this subnet or is this
>just a limitation of the 200R?
>
>Thanks
>
>Ben

It appears to be a limitation of the device. I see no way of adding
additional subnets to the Security Association (on the firewall), which
I assume implies that the SA only has one subnet defined (it's own LAN).
Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'news' in e-mail address)

Relevant Pages

  • Re: VPN Issue
    ... I have read some articles about this subnet issue, so I know what you mean. ... I then connect to my network using the VPN connectoid. ... a new network adapter in the client directly to one in the server. ... But ONLY if I add in the domain.local DNS suffix to the VPN connection. ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN issues
    ... SBS server are using a same subnet network. ... the local subnet does not need route. ... the remote client has the IP address which is in the ... Once the VPN client tries to access the ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Routing Problem
    ... What is needed is a default gateway setting on the client so it knows ... The subnet could be the key. ... >>> Been pulling my hair out trying to set up VPN access from a remote PC ... >>> server and client that comes with it. ...
    (alt.os.windows-xp)
  • Re: Route to remote subnet via VPN dian in
    ... over the VPN, ... there is nothing else you can do on the client machine. ... problems with routing beyond that. ... How to Setup Windows, Network, VPN & Remote Access on ...
    (microsoft.public.windows.server.networking)
  • Re: Can VPN be tested from inside the network?
    ... I had thought - but apparently not correctly - that the subnet mask of 255.255.255.0 on one device, and the 255.255.255.255 on the other when using VPN would avoid the 'same subnet' problem. ... The routing table will be ... the Ethernet port instead of the VPN, ... Running route print before and after opening the VPN is ...
    (microsoft.public.windows.server.sbs)