Access Remote Clients

[talbers]

Ok, VPN works from remote clients to the server. Ping with IP and Ping with name resolution is working from the remote clients to the untangle network. The problem is that if I try to connect to the remote clients from inside the network no joy.
Setup:
Untangle 7.2
Clients Windows 7
VPN Setup:
Remote Clients:
virtual address 172.16.0.varies
address pool: default
Exported Hosts and Networks:
Ip address of internal network: 192.168.16.1
Advanced:
Export DNS is checked.
DNS Override is enabled and pointing to the intermal DNS server192.168.16.3


Any ideas on how to connect to the remote clients would be great.

[dwasserman]

The firewall of windows 7?

[talbers]

Firewall is enabled but if the laptop is hooked up locally then everything works fine. This is an sbs 08 domain so the firewall is controlled by the domain. If that is the problem then any advice as to what is blocking it would be great. Just removing the firewall is not what I would prefer to do.

[talbers]

I don't know if it makes any difference but Untangle is not handing out DHCP or DNS as the SBS box is doing that.

[talbers]

Anyone have any ideas on this????

[dwasserman]

Do a ipconfig /all at the command prompt of one windows 7 remote and post here.
Its a site to site VPN or a client to site?
The client windows 7 its over a public ip or behind some router or nat box?
Can you take a standard windows xp, out of domain, and try the vpn client?

[talbers]

Thanks for the help dwasserman,

Client to site connection. I will get the ipconfig /all posted Mon, first time I can test it.
I just assumed that OpenVPN made a 'tunnel' for two way traffic to take place .
The client windows 7 was on a guest connection and I am sure they have it very well locked down. I am just running some tests right now. I don't have an XP laptop or any laptop that isn't on the domain anymore, upgraded them all to 7. The only reason this is important is if someone has a problem I would love to be able to RDP into their system to fix it. I can use Show MY PC, it works just not great with Vista or 7.

[talbers]

How do the domain machines even know that the VPN address exists?? I have sbs doing the DNS and it know nothing about untangle except that it is setup as the gateway. Is there anything I need to do as far as DNS. Sorry if this is a dumb question I just don't see how the domain would know where to look for a different subnet of IP's.

[dwasserman]

Maybe openvn cant work for your needs.
I dont know if its a 2 way channel.
But, you can enable RRAS in the windows server, and create here the endpoint of the vpn for your clients, this work sure.

[jzero]

Are you exporting internal network to clients?
Remember, internal network on both sides can not be in same segment.