VPN access to server through two routers? Config help

[_wolf0359]

My apologies if this should be in the WAN section, but I've been battling to make this work for some time, to no avail. I've tried what I feel is everything, so that's why I'm reaching out.

Here's what I'm trying to do: create a home lab on different network than other home computers with Dell server, trying to connect via VPN to that server, across two different routers.

Topology:

ISP > Cisco Linksys E1200 WAP (192.168.1.1 default gateway) > 192.168.1.2 int gi0 on Cisco 891 W router > int fa0 (192.168.2.1) goes to Dell server (192.168.2.20) (To this I have assigned the public IP from ISP in RRAS; also running DHCP and DNS; 891 W is not running DHCP)

From personal laptop, I can ping 192.168.1.2, but am unable to ping 192.168.2.1 nor 192.168.2.20 (the server), and am unable to VPN in to the Dell Server across the two aforementioned routers

On the WAP, I have port forwarding for 1723 PPTP enabled to 192.168.1.2 and VPN Passthrough enabled as well

Attached is the current config of the 891 W router. Any input anyone could provide would be greatly appreciated.

Thanks in advance.

[bmcginn]

Hi,

When you say that you can ping 192.168.1.2 from your personal laptop, where is that laptop connected?  In the 192.168.1.0/24 network or the 192.168.2.0/24?

I assume you're not trying to route traffic between the 819 and the E1200 and you just want to NAT everything and do proxy arp?

[Walter Astori]

Can you execute the following command :

traceroute 192.168.2.1 or

traceroute 192.168.2.20

can you add the following command :

ip nat outside source static <IP laptop> 192.168.2.20

[nkarthikeyan]

Hi,

For making PPTP work, you may need to allow protocol GRE as well...... can you do it bi-directional and check if you are able to do vpn with the server?

Also if you ip inspect option, can you add pptp (1723) as well in inspection

Regards

Karthik

[_wolf0359]

When I say I can't ping the server from personal laptop, personal laptop is on network 192.1681.1.0 and I can't ping 192.168.2.0 network, but the server can ping the personal laptop and do everything the other way.