Have you set up a WIN2K/VPN server behind a PIX/VPN?  Is that
possible?
From the Internet I can connect to the PIX (Using the VPN Client
3.6.3) and
get an address from the “ip local pool dealer”... 192.168.1.1
I can then connect to the WIN2K/VPN and pick up an IP address assigned
by
WIN2K/VPN... 10.148.161.151
I can not PING any devices on the network behind the WIN2K/VPN box
such as 10.148.161.x I have checked all the routing(s) tables.  The
problem seems to be the routing entry for the untrusted side of the
WIN2K box pointing to default gateway of my ISP.
I know the WIN2K box is setup properly - As a test I can connect to
the untrusted side of the WIN2K/VPN server (via a LAN cable) and make
the VPN connection and everything works fine.
Can this be done?

---

Request for Question Clarification by arimathea-ga on 26 Dec 2002 13:59 PST

IPSEC or PPTP?

---

Clarification of Question by sarreshteh-ga on 26 Dec 2002 15:12 PST

pptp

---

Clarification of Question by sarreshteh-ga on 10 Jan 2003 10:26 PST

I have tried that.

Check your IP addressing.

If the IP address you're being given when you connect to the Win2K VPN
box is in the same subnet as that on the network you're connecting to
via the Win2K box, your PC will probably not know how to route to the
network. Try giving the VPN box's external interface and the VPN
clients connecting to it addresses in a subnet of, say, 10.148.162.x
(mask 255.255.255.0).