JSI Tip 3442. You can't ping the Internet adapter after configuring Windows 2000 RRAS as a VPN server?

When RRAS is running, and you have both an internal and external NIC, you can't ping the external NIC?

The RRAS Setup Wizard installs filters on the external (Internet) adapter to process only VPN traffic. The filters are:

 Src Addr   Src Mask   Dest Addr   Dest Mask   Protocol   Src Port   Dest Port   Description 
 Any  Any  Any  Any  47  Any  Any  GRE
 Any  Any  Any  Any  TCP  1723  Any  PPTP Inbound
 Any  Any  Any  Any  TCP  Any  1723  PPTP Outbound 
 Any  Any  Any  Any  UDP  500  500  ISAKMP
 Any  Any  Any  Any  UDP  1701  1701  L2TP

To see a which filters are defined for an adapter:

1. Start the Routing and Remote Access snap-in in Microsoft Management Console (MMC).

2. Expand the IP Routing node in the left hand pane.

3. Press General in the left hand pane.

4. Right-click the adapter in the right hand pane, and then press Properties.

5. You can view and edit the Inbound and Outbound filters on the General tab.

To allow pinging to and from the external network adapter, add Inbound and Outbound filters to the adapter to allow ICMP (Internet Control Message Protocol) packets to be processed on the adapter:

1. Follow steps 1 - 4 above.

2. Press Input Filters.

3. Press Add.

4. Select ICMP in the Protocol box.

5. Press OK and OK.

6. Press Output Filters.

7. Press Add.

8. Select ICMP in the Protocol box.

9. Press OK and OK.




Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• The Microsoft
Technology Roadmap
• Office 365 Implementation
• Hyper-V Optimizing
• Windows 8 Deployment
and much more!

Come See Paul Thurrott & Rod Trent in Person!

Early Registration Now Open

Upcoming Training

Mastering SharePoint 2013: Succeeding, Not Just Surviving

Building on the success of the “Mastering SharePoint 2010” seminars, the presenters have updated the content to cover the latest and greatest SharePoint product: SharePoint 2013. While SharePoint 2013 is relatively new on the marketplace, the presenters have been working with SharePoint 2013 for well over a year, and have implemented it with a number of clients in production environments.

Register Now

Current Issue

May 2013 - The NameTranslate object is useful when you need to translate Active Directory object names between different formats, but it's awkward to use from PowerShell. Here's a PowerShell script that eliminates the awkwardness.

CURRENT ISSUE / ARCHIVE / SUBSCRIBE

Windows Forums

Get answers to questions, share tips, and engage with the Windows Community in our Forums.