|
||||||||||
AFAIK, all VPN solutions require different IP subnets on each end. Sometimes the only way you can fix something is to change what you have control over. I would suggest an even more obscure subnet in the 172.16.x.x range and pick a long weekend... If the m0n0wall is using this LAN DNS for its DNS and DNS forwarding is enabled, it should forward any DNS queries to the LAN DNS. This assumes that the LAN DNS is using your ISPs supplied DNS as forwarder, otherwise your LAN DNS will not be able to resolve anything. Think of it this way: your PPTP client will ask the m0n0 for DNS resolution, the m0n0 will ask your LAN DNS for resolution, your LAN DNS will ask your ISP's DNS for resolution (if it does not already have the answer). And they will tell two friends... Do you have each client PC on your LAN printing directly to the 6 printers? I would share from one of your severs... Change the printers IP and the only machine that needs to be told of the change is the one acting as a print server. Does the partridge or the pear tree require an IP? Good luck and have fun. _________________________________ James W. McKeand p.s. If you are not having fun, you are not doing it right... -----Original Message----- From: Mitchel Kagawa [mailto:mitchel at unstupid dot com] Sent: Wednesday, October 27, 2004 3:00 PM To: m0n0wall at lists dot m0n0 dot ch Subject: [m0n0wall] PPTP client and server on same subnet... I recently set up a monowall firewall at my office and am trying to get the PPTP vpn server working. The problem I'm running into is that my office subnet is set to the very popular 192.168.1.x. This ofcourse is the default setting that linksys, and may other, routers are set to. So when I log into the VPN from my home network (via my linksys router and it's 192.168.1.x subnet) it doesn't work, of course. Changing my home network to something like 192.168.0.x solved the problem for myself, but we have many people who travel and log in via networks that they have no control over. So next you are going to tell me to change my office network to something obscure like 192.168.87.x right? Well that is easier said than done because our office network consists of at least 10 servers, 6 printers, 4 access points, 2 dhcp servers, 1 wireless bridge and a partridge in a pear tree. Reconfiguring our network would be difficult, especially reconfiguring each computer to recognize the new static ip of the printers. So my questions ars... Is there any other way to get this vpn to work? Will the new software with OpenVPN solve this? Do I have to reconfigure my subnet? Also one other question... when I log into the vpn from home and do an 'ipconfig -all' it lists the ip address of the firewall/pptp server as one of the DNS servers. Where on the monowall can I edit the DNS settings and push some custom entries like 'fileserver --> 192.168.1.253'. Thanks for any help. ~MK --------------------------------------------------------------------- To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch |