RRAS - VPN Server and Client have same subnet

Hello,
We have a VPN server setup in RRAS on our 2008 R2 server. The VPN works fine. Clients can connect and get to resources on our server fine. 
The issue is that one client has a subnet of 192.168.1.0/24 and the subnet our server uses is also 192.168.1.0/24.
When the client connects, he can get to resources on our server. However, he needs to be able to get to an IP address of 192.168.1.4 using Remote Desktop that is on his local network. He also needs to get on IP 192.168.1.3 via Remote Desktop on the remote
network. 
Is there a way we can accomplish this without changing subnets? 

For anyone else who needs an answer to this, this is the batch file I created using these links:
http://pastebin.com/HV2GmDAk
http://superuser.com/questions/788924/is-it-possible-to-automatically-run-a-batch-file-as-administrator
Here is the content of it:
REM --add the following to the top of your bat file--
@echo off
:: BatchGotAdmin
REM  --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
    echo Requesting administrative privileges...
    goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
    set params = %*:"=""
    echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
    "%temp%\getadmin.vbs"
    del "%temp%\getadmin.vbs"
    exit /B
:gotAdmin
    pushd "%CD%"
    CD /D "%~dp0"
rem You need to replace:
rem <VPN> with the Name of the VPN connection you created
rem <USER> with the vpn user
rem <PASS> with the vpn pass
rem @echo off
@echo make sure to be disconnected!
rasdial "Your VPN" /d
@echo start to connect to vpn
rasdial "Your VPN" username password
netsh interface ip show config name="Your VPN" | findstr "IP" > ip.dat
set /p ip= < ip.dat
del ip.dat
set ip=%ip:~-13%
@echo VPN IP is %ip%
@echo Delete 192.168.1.0 route
route delete 192.168.1.0
set target=192.168.1.3
@echo Add route for %target%
route add %target% mask 255.255.255.255 %ip%
timeout /T 3 > nul

Similar Messages

  • Connection fails if server and clients are in different subnets

    Hello,
    our Volume License Manager (v2.1) is running in another subnets than the clients (All machines are running under Windows XP-SP2 without Domains or ADS, just workgroups).
    The server is in subnet A (192.168.42.0/24), all clients are located in another subnet  B (192.168.50.0/24).
    Routing is properly configured and is working fine, traffic to the specific hosts is not blocked by a firewall. We can ping every machine,
    open telnet connections to the NILM, everything works.
    But if the clients try to connect to the remote NILM (both local client NI License Manager and VLM port settings are correct)  their connection attempt always
    times out with error code "NILM10"
    (I already read the mentioned KBs, no solution has helped so far). This is true if clients and server are separated.
    For testing purposes, i plugged one client into the server's subnet (server's IP: 192.168.50.250, client 192.168.50.10)
    and it worked perfectly. Is there a reason why  server and client have to be on the same subnet or is it some other kind of problem that I am not aware of?
    Thank you.
    Thorsten

    Hello Thorsten,
    Did you add the server's domain to the client computer's DNS settings. To do this, complete the following steps on the client computer:
    1. Open Local Area Network Settings from the Control Panel (Start»Control Panel»Network Connections»Local Area Connection)
    2. Click the Properties button
    3. Select Internet Protocol (TCP/IP) from the list of network components
    4. Click the Properties button
    5. Click the Advanced button
    6. Change to the DNS tab
    7. Ensure Append these DNS suffixes is selected
    8. Click the Add button
    9. Enter the domain suffix of the license server and click Add
    10. Close any open dialog boxes, choosing OK and Close as necessary.
    (http://digital.ni.com/public.nsf/allkb/3AAF37CD7B89A2CD86257070005A075A?OpenDocument)
    Further you should check this KBs.
    Why is My NI License Manager Slow or Not Responsive with a Configured Network Server on Another Domain?
    http://digital.ni.com/public.nsf/allkb/27D6BD8116EF257A862572F2005C2181?OpenDocument
    How Can I Access NI Volume License Manager from a Different Network or Behind a Firewall?
    http://digital.ni.com/public.nsf/websearch/54E52C3F348B929786256DCD0056B19B?OpenDocument
    Regards,
    WolfgangZ

  • UDP server and client running on same machine

    Hi all,
    I can't get the QuoteServer example to work. I am trying to run both server and client on same machine since I only have one machin available at the moment.
    I am using win xp behind a firewall. Anything that might interfere?
    With some System outs I can see that the server is waiting for request but never getting any...

    Restarted computer and now it works. Are ports locked up if I get an exception in the 'wrong' place?

  • ASA 5505 as a SSL VPN Server and Easy VPN Client at the same time?

    Is it possible to configure and operate the ASA 5505 as a SSL VPN server and Easy VPN Client at the same time? We would like to configure a few of these without having to purchase additional ASA 5505 and use a 2 device method (1 SSL VPN Server and 1 Easy VPN Client). Thanks in advance.

    I don't think it is possible. Following links may help you
    http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a008068dabe.html
    http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008071c428.shtml

  • VPN between ASA5505 Easy VPN Server and 881G Router as Easy VPN Client

    Hello,
    I have problem in VPN between ASA5505 Easy VPN Server and 881G Router as Easy VPN Client. ASA 5505 have 7.2.3 software and 881G router have 15.1 software.
    881G is configured as hardware client in network exstention mode, and it is placed behind NAT. ASA5505 is working as server. Same VPN Group works correctly from VPN software clients.
    When I send traffic from 881G client side, in show cryto sessin detail I see encrypted packets. But with same command I dont see decrypted packet on ASA5505 side. On both devices Phase 1 and Phase 2 are UP. 
    VPN is working when I replace ASA5505 with ASA5510  correctly with have 8.4.6 software. But problem is that i need to do this VPN between ASA5505 and 881G.
    Can you help me, how can I debug or troubleshoot this problem ?
    I am unable to update software on ASA5505 side.

    Hello,
    Hire is what my config look like:
    crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
    crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
    crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
    crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
    crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
    crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
    crypto dynamic-map outside_dyn_map 20 set pfs
    crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 40 set pfs
    crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 60 set pfs
    crypto dynamic-map outside_dyn_map 60 set transform-set ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 80 set pfs
    crypto dynamic-map outside_dyn_map 80 set transform-set ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 100 set pfs
    crypto dynamic-map outside_dyn_map 100 set transform-set ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 120 set pfs
    crypto dynamic-map outside_dyn_map 120 set transform-set ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 140 set pfs
    crypto dynamic-map outside_dyn_map 140 set transform-set ESP-AES-128-SHA
    crypto dynamic-map outside_dyn_map 160 set pfs
    crypto dynamic-map outside_dyn_map 160 set transform-set ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 180 set pfs
    crypto dynamic-map outside_dyn_map 180 set transform-set ESP-3DES-SHA
    crypto dynamic-map outside_dyn_map 200 set pfs
    crypto dynamic-map outside_dyn_map 200 set transform-set ESP-AES-256-SHA
    crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
    crypto map outside_map interface outside
    crypto isakmp enable outside
    crypto isakmp policy 1
     authentication pre-share
     encryption 3des
     hash sha
     group 2
     lifetime 86400
    crypto isakmp policy 2
     authentication pre-share
     encryption 3des
     hash sha
     group 1
     lifetime 86400
    crypto isakmp policy 3
     authentication pre-share
     encryption des
     hash sha
     group 2
     lifetime 86400
    tunnel-group HW-CLIENT-GROUPR type ipsec-ra
    tunnel-group HW-CLIENT-GROUP general-attributes
     address-pool HW-CLIENT-GROUP-POOL
     default-group-policy HW-CLIENT-GROUP
    tunnel-group HW-CLIENT-GROUP ipsec-attributes
     pre-shared-key *******
    group-policy HW-CLIENT-GROUP internal
    group-policy HW-CLIENT-GROUP attributes
     password-storage enable
     split-tunnel-policy tunnelspecified
     split-tunnel-network-list value cisco_splitTunnelAcl
     nem enable

  • Can I put both RMI server and client in a same program

    hi everybody...
    I wanna know that can I use RMI server and client in a same program....My idea is like that I wanna use the same program for client and server....When I open my program, I can accept connection from other program and if I want to connect to others, I can also connect it. I expect you to understand my question. Here are the sample code for my program...
    package Chat.Rmi;
    import java.lang.*;
    import java.util.*;
    import java.rmi.*;
    import javax.swing.*;
    import java.net.*;
    import java.rmi.server.*;
    import java.rmi.registry.*;
    public class netKitManager implements netKitInterface{
        public netKitManager(){
            try{
            reg = LocateRegistry.createRegistry(4242);
            reg.rebind("NetKitServer",this);
            }catch(RemoteException re){
        public void DirectConnect(String ip){
            try{
            netUser = (netKitInterface) Naming.lookup("rmi://"+ip+":4242/NetKitServer");
            JOptionPane.showMessageDialog(null,"Connection succeded!");
            }catch(NotBoundException nbe){
                JOptionPane.showMessageDialog(null,"There is no server at specified IP address!");
            }catch(MalformedURLException mue){
                JOptionPane.showMessageDialog(null,"IP adress may be wrong!");
            }catch(RemoteException re){
                JOptionPane.showMessageDialog(null,"Remote exception occured!");
        public void SendMessage(String msg){
            try{
            netUser.SetMessage(msg);
            }catch(RemoteException re){
        public void SetMessage(String msg) throws RemoteException{
            chatKit.SetMessage(msg);
        private netKitInterface netUser;
        private Hashtable netUserList;
        private Registry reg;
    }

    Yes it can be done. I have done it.

  • Redundant folders created in root of C drive of server and Client . I want to stop the same and want to automatically delete them from server and client .

    Redundant folders created in root of C drive of server and Client . I want to stop the same and want to automatically delete them from server and client .
    Please let me know the solution to delete them not manually . It should not create automatically .Is there a way we can change the path of creation.
    Is there a way that once the folfer is create should be automatically deleted once the task is done.
    Redundant folders are created in the root of my C drive all the time,
    folder names look like:
    09b0508d0bd2dbd70523
    56f51b81c1462bb378009ee4d5ed03
    02afe4378371907aca40ab

    This is a duplicate of
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/ae99c2d0-8dea-4c5e-8a79-17e08e9e5de4/sccm-2012-issue-folders-with-long-guid-are-created-in-c-drive?forum=winservergen#ae99c2d0-8dea-4c5e-8a79-17e08e9e5de4
    Jason | http://blog.configmgrftw.com

  • RRAS VPN performance and Internet access which connecting to RRAS VPN

    For the first time, I setup win2008R2 RRAS VPN(L2TP and SSTP ) in Azure VM for my client.
    I am running Package Application which include SQL2008 in that  VM.
    I plan that remote user connect from client application using RRAS VPN to Application server in Azure VM.
    But I am worrying about the performance bottle net due to network speed reason.
    I am not yet make sure network environment of my client ( my client is living in USA ).
    1
    But if we decide to use RRAS VPN for that application , which kind of VPN(PPTP,L2TP,SSTP,IKE) will be better in network speed?
    2
    I noticed that which connecting to RRAS VPN, I could not connect to the Internet from remote client PC.
    Is there any way to enable RRAS VPN access and Internet access at same time ?

    Hi,
    1. PPTP is the easiest protocol to use for setting up VPN. And it have minimal security.
    L2TP/IPSec, SSTP and IKEv2 was more security than PPTP.
    IKEv2 can provide a secured uninterrupted ubiquitous VPN connectivity.
    Here are good article about comparing four types of VPN,
    Different VPN tunnel types in Windows - which one to use?
    http://blogs.technet.com/b/rrasblog/archive/2009/01/30/different-vpn-tunnel-types-in-windows-which-one-to-use.aspx
    2. Two common scenarios cause the problem that connected client can’t browse the Internet. First, the VPN server might not let remote clients access the Internet when they have a connection. In this case, when we close the VPN connection,
    the client can browse the Internet because the default gateway reverts to the gateway that ISP defines. Second, Windows might overwrite the ISP gateway with the VPN server-defined gateway when the client connects, so the client has no path to the Internet.
    We may need to uncheck the use default gateway on remote network to solve this problem.
    Best Regards,
    Tina

  • Try to use one comupter as both server and client

    Hello, everyone, I am just trying to use my own computer as both server and client to test some codes about networking. For example, use the sample code in java tutorial which is used to test Echo server(code is listed below). Is there anything I have to do to set my computer, such as set my hostname or something like that?
    I am a pure newbie. And the purpose of this question is to test some code including socket on one PC without connect to internet.
    I have tried to change the name "taranis" in the following code to the computer name of my own PC, but it doesn't work, and said: Couldn't get I/O for the connection to: (my computer name).
    import java.io.*;
    import java.net.*;
    public class EchoClient {
    public static void main(String[] args) throws IOException {
    Socket echoSocket = null;
    PrintWriter out = null;
    BufferedReader in = null;
    try {
    echoSocket = new Socket("taranis", 7);
    out = new PrintWriter(echoSocket.getOutputStream(), true);
    in = new BufferedReader(new InputStreamReader(
    echoSocket.getInputStream()));
    } catch (UnknownHostException e) {
    System.err.println("Don't know about host: taranis.");
    System.exit(1);
    } catch (IOException e) {
    System.err.println("Couldn't get I/O for "
    + "the connection to: taranis.");
    System.exit(1);
         BufferedReader stdIn = new BufferedReader(
    new InputStreamReader(System.in));
         String userInput;
         while ((userInput = stdIn.readLine()) != null) {
         out.println(userInput);
         System.out.println("echo: " + in.readLine());
         out.close();
         in.close();
         stdIn.close();
         echoSocket.close();

    Did you write the EchoServer and start it on your
    machine, listening on port 7?
    You can have the client and server running on the same
    machine or different machines, but they have to be
    separate pieces of software.
    Write a separate EchoServer class that starts up and
    listens on that port. Then start the EchoClient and
    make the connection.
    %yeah, I didn't wrote the EchoServer class. But I thought it is automaticly included and therefore has run once I start my computer.
    If I write a EchoServer class, then how should I set the host name of the EchoClient, just simply change "taranis" to my computer name (change "echoSocket = new Socket("taranis", 7);" to echoSocket = new Socket("(my comptuer name)", 7);"?

  • How can a VI be both server and client?

    Hi, 
    I'm new in LabView and I'm trying to build a server and client VI using TCP/IP that runs in two computers. in my program I need both server and client VIs to communicate with each other which means I need both VIs to be server and client. I've tried using a case structure but it doesnt work. The only thing I achieved is a normal server/client system where the server sends a request and the client responses.But i need the client to send requests too.i have attached my VIs to this post.I would appriciate it if someone could help with this problem. 
    Thanks in advanced. 
    Rambaldi.
    Solved!
    Go to Solution.
    Attachments:
    Server-Client.zip ‏41 KB

    Do you really need a client and server on each PC? If you simply need that two to talk to each other they can once the client connects to the server. In most cases you only need one server.
    What Steve said about the not using the same port only applies to two servers on the same machine. A client must use the port the server is listening to and if the client and the server are on the same machine then they will both use the same port. However, only ONE of them is accepting waiting for connections on that port.
    In the code you posted you actually swapped the names. What you call the client is actually the server code and vise versa. In networking a server is an application that listens to an assigned port, accepts connections on that port and provides whatever services it has implemented. A client is an application that establishs a connection to a server. Once a connection is established the two applications can communicate in both directions. The applications themselves will define how the conversation should progress and whether it is a one way conversation or a two way conversation. You don't specify what you are trying to accomplish but I suspect you only need a single server.
    In TCP, every connection is defined by the source and destination IP addresses and the source and destination ports. The server uses a known port (FTP is port 21, HTTP is 80, telnet is 23, or some custom port in the user space beyonds the reserved ports) to listen for connections. The client will use the well known port of teh server and generally picks a random port for its port number. The LabVIEW VIs do this automatically. This is how a server and a client on the same computer can use the same port number. Two servers however cannot. The server application can spawn a child task allowing it to service multiple connections at one time though. Each connection will be unique though since the client's port number, address or both will change for each connection.
    OK, end of networking 101.
    Can you describe in a bit more detail what exactly you want to accomplish. Given that I could probably provide you with more information for your application.
    Mark Yedinak
    "Does anyone know where the love of God goes when the waves turn the minutes to hours?"
    Wreck of the Edmund Fitzgerald - Gordon Lightfoot

  • Setup server and client

    I am new in Oracle, so have some question to ask.
    How to set up server and client Oracle in same pc? Can suggest any document?
    which version of Oracle will be recommend?
    I using VB as a front-end.

    Hi,
    Start reading TFM for your version(click)
    . choose your version
    . read cover to cover the "Concepts book"
    . read the developper books
    Advisable version certainly is the last one: Oracle 10g Release 2.
    Regards,
    Yoann.

  • VTP server and client setup in multiple switches

    I understand that we need to setup 1 vtp server and client to exchange trunking messages, to advertise and to updates. But when I have 4 switches connected in square formation, which 1 should I choose to become Server? Another senario, if I have distribution and core layer switches, where I should place my VTP server switch?
    Thanks.

    Disclaimer
    The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
    Liability Disclaimer
    In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
    Posting
    Not sure about VTPv3, but with earlier VTP versions, the only major difference between VTP servers and clients is, servers allow you to configure VLAN changes.  Both exchange VLAN database information with their immediate neighbors.  The real advantage of only having one VTP server configured, it avoids two people configuring two VTP servers at the same time, and creating an update conflict between them.  (NB: if you lose your only VTP server, you can promote a client to be a server.)

  • On-premises & Azure VMs with my virtual Network both can have same Subnet?

    Dear All,
    May i know Azure support on below scenario.
    On-Premises & Azure VMs with my virtual Network both can have same Subnet?
    Examples:
    On-premises VMs and Azure VMs using same network subnet(192.168.191.0/24).
    *On-Premises VMs = The VMs host at my own Data Center.
    Thanks.

    Greetings!
    You cannot configure 2 networks with the same subnet and join them. While connecting via VPN, the packet may not even hit the Gateway of a network to get routed to the other. Also, the destination IP may or may not be present on a computer within the
    same network. If it is present, the destination might turn to be undesirable, and if not, the packet might be broadcasted and dropped when nobody acknowledges it in the same subnet.  
    Hope it clarifies.
    Thank you,
    Arvind

  • Force CORBA server and client to localhost

    Hi,
    i have to run an omg corba server and client via orbd on a single machine with win xp. The machine is connected to the network, but this is not relevant for the corba communication.
    I can now force the orbd to start at localhost. After starting server and client everything works well until disconnecting machine from network, because client and server are started at ip of network card.
    How can i force the client and server to use a localhost port for corba communication (client and server)?
    Hope anyone has an idea...
    br
    ralf
    P.S.: If I start the applications after disconnecting network everthing works.

    Resolved the problem myself.
    The correct property is a java system property:
    com.sun.CORBA.ORBServerHost=localhost
    If you set this property in your application before instanciating an ORB, the orb will be forced to run on the set value (in this case localhost). If you do not set this property the ORB will be started at the IP of your network card if it is active (connected to the network)...

  • Time sync between server and client

    Hi guys,
    I have written a chess server and client. My next step is to implement a clock which will be used in timed games, however, I am not sure of the best solution. I can't think of a reliable method to keep the client's time in sync with the servers because the event latency varies between individual events and clients.
    My first idea was to send a 'tick' event every second but I dont think this the best solution. I have seen many applet based clients which have timers, such as Yahoo chess.
    I know this question is a little vague, I can give more detail if needed.
    Thanks,
    Alex

    To prevent client-side cheating, the server should keep the
    "official" clock. Every so often (perhaps when a move gets made?),
    notify both clients of the official time. Clients count seconds from
    that official time.
    This is a suboptimal solution because it leaves clients vulnerable
    to network lag. I can't think of any other solution that doesn't give
    clients some responsibility for tracking time, though, and that's a
    big security hole.
    If you're willing to open that hole, have each client report back to
    the server the elapsed local time from when they recieved the
    last move to when they made their move. Then update the other
    client's clock accordingly.

Maybe you are looking for