Solved W7 VPN connected but cannot access network or map network drive

[Me1mon]

I'm sorry I need help with this topic

http://www.sevenforums.com/network-sharing/324758-network-drops-after-while-using.html

 

[Rincewindwiz]

Seems a bit feeble design-wise that a message should arrive at the router but the router has no means of knowing where to send a replay!! I mean how does the router acknowledge receipt of the initial message?

Anyway, set up static route on router as follows
Destination IP Address: 192.168.11.22
Subnet Mask:255.255.255.0
Gateway: 192.168.1.67
Interface: LAN

Set vpn to use remote gateway
route output


RAS connection shows internet available and client can connect to internet.
Client can ping 192.168.1.67 OK
Client Browse shows server network shares. by \\computername or \\IP

Only failure is Server cannot browse/access client Message is 'Windows cannot access 192.168.11.22

BTW - Can Windows 7 ultimate can support simultaneous VPN connections either through 1 RAS or perhaps multiple RAS connections?

 

[Kaktussoft]

Great progress!

Please post route -4 print output from server as well. When vpn client connected of course

 

[Kaktussoft]

BTW - Can Windows 7 ultimate can support simultaneous VPN connections either through 1 RAS or perhaps multiple RAS connections?

Yes. But why do you ask?

Can vpn server ping 192.168.11.22 successfully?

 

[Rincewindwiz]

Hhhmmm Slight step backwards
I have restarted the VPN.
Ping 192.168.1.67 works fine
Ping computername works fine (reply from 192.168.11.21)
I cannot browse the server network
I can access a specific share (\\servername\share or \\192.168.1.67\share)

Route o/p

BTW - Can Windows 7 ultimate can support simultaneous VPN connections either through 1 RAS or perhaps multiple RAS connections?
Yes. But why do you ask?

Because I keep the records of the worlds largest scratch amateur golf tournament. for 4 days each year, 3 people typed in information at 3 different locations and I have to sort the mess out afterwards. Easier if they could all access the same database. Its a thick client (developed in the 90s app) and running 3 instances from a single network drive would seem to be the easiest solution

When I tried to connect to the VPN from a 2nd computer, I got a message along the lines of "error 937 . . a connection of this type is already . . . ."

Can vpn server ping 192.168.11.22 successfully?

Yes Can't ping by name though.

 

[Kaktussoft]

looks you posted route -4 print output from client (?) In #63 I asked to do it on vpn server

 

[Kaktussoft]

Sorry... only 1 vpn client simultaniously is possible.... see http://www.sevenforums.com/network-sharing/57032-multiple-vpn-connections-same-computer.html

 

[Rincewindwiz]

Sorry - got wrong file after I moved it across to other PC

 

[Kaktussoft]

Who did add the persistent route on the bottom, and why?
What is 192.168.11.25 ???

On server \\192.168.11.21 and \\192.168.11.25 what does it show?
Did you add the static route on server's side router already?

 

[Rincewindwiz]

Who did add the persistent route on the bottom, and why?

I have no idea!!! I am not sure I would know how to do that. I assumed it was a by-product of the route I added to the router a while back

What is 192.168.11.25 ???

Equally, I don't know.

On server \\192.168.11.21 and \\192.168.11.25 what does it show?
From the server \\192.168.11.25 spends forever (> 5 minutes) Attempting to connect
Ping 192.168.11.25 produces TTL expired in transit!!! but then sent 4 received 4 Lost 0
From the server \\192.168.11.21 gives Windows cannot access . . .
Ping From the server \\192.168.11.21 works fine. (time(1ms TTL=128)

Did you add the static route on server's side router already?

I have only added the one route that I listed in my reply 3 hours ago
Destination IP Address: 192.168.11.22
Subnet Mask:255.255.255.0
Gateway: 192.168.1.67
Interface: LAN

Further although I am using both PCs I am not doing anything that I think would affect the network or its settings. I switch one PC (client) from SKY wifi to the LAN when I am not answering questions but that is all. The server PC has been unchanged for a couple of days now.

 

[Kaktussoft]

I have only added the one route that I listed in my reply 3 hours ago
Destination IP Address: 192.168.11.22
Subnet Mask:255.255.255.0
Gateway: 192.168.1.67
Interface: LAN

What is 192.168.11.22? why 192.168.11.22? It must be 192.168.11.21

 

[Kaktussoft]

On remote side pc (any other than vpn server): that computer has tcpip address 192.168.1.* for example 192.168.1.50
Please do on that computer:

tracert  192.168.11.21

Post output. The traffic should go to 192.168.1.1, then 192.168.1.67, then 192.168.11.21

That proves remote server's ip subnet can access the vpn-tunnel

 

[Rincewindwiz]

VPN connected. Use gateway on remote host ticked.
Access to server fine.


On another PC on same LAN as server

C:\Documents and Settings\Rincewind>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DEAN-M5
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Wireless Network Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 3945ABG Networ
k Connection
Physical Address. . . . . . . . . : 00-13-02-1C-05-33

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 PL Network Connect
ion
Physical Address. . . . . . . . . : 00-0E-7B-43-F8-78
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.69
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1

C:\Documents and Settings\Rincewind>ping 192.168.11.21

Pinging 192.168.11.21 with 32 bytes of data:

Reply from 192.168.11.21: bytes=32 time=1ms TTL=127
Reply from 192.168.11.21: bytes=32 time<1ms TTL=127
Reply from 192.168.11.21: bytes=32 time=1ms TTL=127
Reply from 192.168.11.21: bytes=32 time<1ms TTL=127

Ping statistics for 192.168.11.21:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 1ms, Average = 0ms

C:\Documents and Settings\Rincewind>tracert 192.168.11.21

Tracing route to 192.168.11.21 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.1.1
2 * * * Request timed out.
3 1 ms <1 ms <1 ms 192.168.11.21

Trace complete.




I've lost the plot here and am rapidly losing the will to live!!!

BTW your #71 asked "Why 192.168.11.22
Because to asked me to in #53!!
I can change it if required?

 

[Kaktussoft]

Wow!! 192.168.1.69 (a computer on same LAN as server) can ping the vpn tunnel 192.168.11.21 . You can see the tracert output that it goes to the remote router 192.168.1.1 and then a timeout (must be 192.168.1.67 not responding temporary for a reason) then vpn tunnel. Tunnel responses back... so knows the route back as well.

Can client ping 192.168.1.1 ? if not... tracert 192.168.1.1
Can client ping 198.211.122.92?
Can client ping kaktussoft.nl?

192.168.11.22 doesn't even exist... was a typo!

 

[Rincewindwiz]

Yes to all of these (going via VPN tunnel and gateway on remote server)

192.168.11.22 doesn't even exist... was a typo!

So should I change this route in the router to .11.21?

 

[Kaktussoft]

On vpn-client: tracert 198.211.122.92 . Does it go through 192.168.1.1 (so remote router)? It first goes throus 192.168.11.21 the vpn tunnel

hopefully for the last time. Post route -4 print output from server and client. And post a screenshot of the static route you created on the remote router

 

[Rincewindwiz]

On vpn-client: tracert 198.211.122.92 . Does it go through 192.168.1.1 (so remote router)? It first goes throus 192.168.11.21 the vpn tunnel

YES
C:\Users\Rincewind>tracert 198.211.122.92

Tracing route to 198.211.122.92 over a maximum of 30 hops

1 30 ms 32 ms 33 ms PONDER [192.168.11.21]
2 31 ms 63 ms 30 ms 192.168.1.1
3 * * * Request timed out.
4 115 ms 115 ms 56 ms ip-84-38-37-52.easynet.co.uk [84.38.37.52]
5 146 ms 150 ms 60 ms ae-1.r00.londen01.uk.bb.gin.ntt.net [83.231.199.161]
6 282 ms 340 ms * ae-6.r02.londen03.uk.bb.gin.ntt.net [129.250.3.2]
7 64 ms 72 ms 60 ms ae-4.r23.londen03.uk.bb.gin.ntt.net [129.250.5.40]
8 77 ms 66 ms 73 ms ae-3.r22.amstnl02.nl.bb.gin.ntt.net [129.250.5.198]
9 66 ms 67 ms 62 ms 198.211.122.92

Trace complete.


The timeout is where it has a go via .67? (before popping off to easynet)
Why would it go to .67 after hittitng .1.1 (the router)?

hopefully for the last time. Post route -4 print output from server

and client.

And post a screenshot of the static route you created on the remote router

is the only route I have created in response to your #53

So it was the .21 that was the typo, not the .22?
Should I leave this / Change this / Delete This route?

 

[Kaktussoft]

the screenshot on router: 192.168.11.22/255.255.255.0 means 192.168.11.* so also 192.168.11.21. No need to change
--------------------------------
Client throws all traffic except 192.168.0.* to the vp tunnel! Great! No static routes needed at all
Router on Server side knows where vpn tunnel is.... great. Even if it was possible to have more 19.168.11.* tunnels.

On server: nslookup
Post screenshot.
On server: ping -a 192.168.1.69 (so ping the other comoputer on server side)
Post screenshot.

What is NOT working?

 

[Kaktussoft]

The timeout is where it has a go via .67? (before popping off to easynet)
Why would it go to .67 after hittitng .1.1 (the router)?

My fault...

 

[Rincewindwiz]

Well I think the whole VPN thing is working as well as it can. Thank you for you perseverance.

the screenshot on router: 192.168.11.22/255.255.255.0 means 192.168.11.* so also 192.168.11.21. No need to change

Oh I just hate this sort of thing. WHY does 192.168.11.22 mean 192.168.11.*?
Why do you not enter 192.168.11.* if that is what you want?
And why is 255.255.255.0 significant? - or is this too difficult?!