Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN access to server through two routers? Config help

My apologies if this should be in the WAN section, but I've been battling to make this work for some time, to no avail. I've tried what I feel is everything, so that's why I'm reaching out.

Here's what I'm trying to do: create a home lab on different network than other home computers with Dell server, trying to connect via VPN to that server, across two different routers.

Topology:

ISP > Cisco Linksys E1200 WAP (192.168.1.1 default gateway) > 192.168.1.2 int gi0 on Cisco 891 W router > int fa0 (192.168.2.1) goes to Dell server (192.168.2.20) (To this I have assigned the public IP from ISP in RRAS; also running DHCP and DNS; 891 W is not running DHCP)

From personal laptop, I can ping 192.168.1.2, but am unable to ping 192.168.2.1 nor 192.168.2.20 (the server), and am unable to VPN in to the Dell Server across the two aforementioned routers

On the WAP, I have port forwarding for 1723 PPTP enabled to 192.168.1.2 and VPN Passthrough enabled as well

Attached is the current config of the 891 W router. Any input anyone could provide would be greatly appreciated.

Thanks in advance.

  • LAN Switching and Routing
4 REPLIES
Bronze

Hi,When you say that you can

Hi,

When you say that you can ping 192.168.1.2 from your personal laptop, where is that laptop connected?  In the 192.168.1.0/24 network or the 192.168.2.0/24?

I assume you're not trying to route traffic between the 819 and the E1200 and you just want to NAT everything and do proxy arp?

 

 

New Member

Can you execute the following

Can you execute the following command :

traceroute 192.168.2.1 or

traceroute 192.168.2.20

can you add the following command :

ip nat outside source static <IP laptop> 192.168.2.20

Hi, For making PPTP work, you

Hi,

 

For making PPTP work, you may need to allow protocol GRE as well...... can you do it bi-directional and check if you are able to do vpn with the server?

 

Also if you ip inspect option, can you add pptp (1723) as well in inspection

 

Regards

Karthik

New Member

When I say I can't ping the

When I say I can't ping the server from personal laptop, personal laptop is on network 192.1681.1.0 and I can't ping 192.168.2.0 network, but the server can ping the personal laptop and do everything the other way.

54
Views
0
Helpful
4
Replies