RV 180 PPTP - LAN users can not access remote users.

[mario_grgic]

I have fairly basic PPTP VPN setup: enabled PPTP VPN (starting address 192.168.1.50 ending IP 192.168.60) and created a VPN User for PPTP protocol.

The user can successfully connect to the VPN (It gets 192.168.1.51 IP address) and can ping/access LAN computers (LAN IPs are in the 192.168.1.100-254 range). However, none of the LAN computers can ping/access the remote user.

Pinging 192.168.1.51 from either router or any LAN computer while the remote user is connected gives:

$ ping 192.168.1.51

PING 192.168.1.51 (192.168.1.51): 56 data bytes

Request timeout for icmp_seq 0

Request timeout for icmp_seq 1

Request timeout for icmp_seq 2

Request timeout for icmp_seq 3

ping: sendto: No route to host

Request timeout for icmp_seq 4

ping: sendto: Host is down

Request timeout for icmp_seq 5

ping: sendto: Host is down

Request timeout for icmp_seq 6

ping: sendto: Host is down

Request timeout for icmp_seq 7

ping: sendto: Host is down

Request timeout for icmp_seq 8

ping: sendto: Host is down

Request timeout for icmp_seq 9

ping: sendto: Host is down

Request timeout for icmp_seq 10

^C

--- 192.168.1.51 ping statistics ---

12 packets transmitted, 0 packets received, 100.0% packet loss

$

Also, if remote user is connected from two different locations (under same VPN User name) they both get same IP 192.168.1.51? This does not seem right?

[trgood]

Hi Mario,

Do you have the remote users firewall turned off.  By default Windows firewall will block ICMP.  If you do have it turned off and its still not working this seems like a larger issue. I'll try to see if I can recreate it in my lab. 

-Trent Good

** Please rate useful posts! **

[mario_grgic]

All the machines on the network (LAN and remote) are Macs, and they do not have any kind of firewall running.

[trgood]

Hi Mario,

I just set this up in my lab.  I do not have Macs available to test but with Windows PCs there were no issues.  Have you tried deleting and recreating the users?

I would also ensure as you have already done that there is no firewall or antivirus software running that would block ICMP.

I would try rebooting both ends (RV and Mac).

Lastly I would ensure the software on the RV180 is up to date. 

If you do all this and still have issues I would recommend oppening a case with TAC to look into possible software issues.  Let me know if I can help in any other way.

-Trent Good

** Please rate useful posts! **

[mario_grgic]

I can confirm there are no firewalls or antivirus software running on any machines. Ping works normally between machines when they are on the LAN. If one of those becomes remote and connects through VPN it basically becomes invisilble to the LAN it connects to. It can ping others on the network, it can access services and shares etc, but nothing sees it.

I have tried rebooting the router and recreating the VPN user but that didn't help either.

This is what the routing table looks like after VPN connection is established:

IPv4 Routing Table

Destination	Gateway	Genmask	Metric	Ref	Use	Interface	Type	Flags
192.168.1.51	0.0.0.0	255.255.255.255	0	0	0	ppp0	Static	UP,Host
127.0.0.1	127.0.0.1	255.255.255.255	1	0	0	lo	Static	UP,Gateway,Host
192.168.1.0	0.0.0.0	255.255.255.0	0	0	0	bdg1	Dynamic	UP
192.168.1.0	192.168.1.1	255.255.255.0	1	0	0	bdg1	Dynamic	UP,Gateway
99.236.192.0	0.0.0.0	255.255.254.0	0	0	0	eth1	Dynamic	UP
239.0.0.0	0.0.0.0	255.0.0.0	0	0	0	bdg1	Dynamic	UP
127.0.0.0	0.0.0.0	255.0.0.0	0	0	0	lo	Dynamic	UP
0.0.0.0	99.236.192.1	0.0.0.0	0	0	0	eth1	Dynamic	UP,Gateway

I will also try windows client and report here as well shortly.

By the way I am using Firmware 1.0.3.10

[dbkirkland]

Looks like the Genmask for the first entry is wrong.  It should end in 0, not 255.

[mario_grgic]

Interestingly enough I get the same issue with Windows machine as remote VPN client.