Stymied on a PPTP Routing Question

David Bovee david.bovee at WATCHGUARD.COM
Thu Mar 2 20:14:19 EST 2000


If the router on the 172.2 network thinks the route back to your globally
unique address is via the Internet, you will have asymmetric routes.  The
172.2 network router needs to route the packets to your globally unique
address via the 10.x net..  This all assumes that you have security on your
home system.  If you did not (for example were not using any filtering),
then the asymmetrical routing should work, as the applications running on
your system will not discriminate between packets from logical
subinterfaces.

HTH,
-David

> -----Original Message-----
> From: Michael Medwid [mailto:Michael.Medwid at ARIBA.COM]
> Sent: Tuesday, February 29, 2000 4:15 PM
> To: VPN at SECURITYFOCUS.COM
> Subject: Stymied on a PPTP Routing Question
>
>
> Currently our internal address space at our company is 10.x.x.x.  We
> recently acquired a company whose internal address space is 172.2.x.x.
> Their routes have populated our routers via eigrp and from my 10.x.x.x
> network I can ping or telnet any device on the 172.2 network.
>  However if I
> use PPTP to tunnel into our network from my home system on DSL (with a
> routable IP address) I can get to any system on the 10.x.x.x
> subnet but I
> can not reach anything on the 172.2.  I tried manually adding
> routes while
> the PPTP tunnel was up.  That did not help. Can you think of
> what might be
> limiting my access to only the 10.x.x.x network?  Any
> solutions?  If this
> question is too specific for this mail list send me a whack on
> the head.  :-)
>
> -Michael
>
> VPN is sponsored by SecurityFocus.COM
>

VPN is sponsored by SecurityFocus.COM




More information about the VPN mailing list