IPSec LAN routing when not gateway

[tritek]

Our ISP provides us with 5 static ips. I am using 2 right now with the following devices

1) Epygi IP/PBX 16x
2) Windows 2003 Small Business Server running DHCP, DNS, WINS Routing & Remote Access.

My LAN Data clients connect to the internet through #2. I.e. no data traffic goes through the Epygi. We are doing this because although not perfect, running everything on Windows 2003 eases maintenance and we are a consulting company that needs to make frequent network changes due to projects. I would rather have one device control everything assuming that device is not over taxed.

Unfortunately, I now need to setup an IPSec static VPN with 4 offices and I can't get my Windows 2003 Routing & Remote Access box to properly find the IPSec policy I have created.

As an alternative, I would like to use my Epygi's IPSec capability and point the 3 offices to its wan ip address. I can successfully establish the IPSec connection between the offices and the Epygi. And someone on the remote network can ping my Epygi lan ip address. The trouble is they can't ping anything else on the network by host name or ip address. What I would like to do is for the Epygi to forward any requests for LAN devices other than it to my Windows 2003 gateway. Is this even possible?


________
MARRIAGE ADVICE

[threebit]

You would need to put a routing rule on your default gateway (Windows box) for traffic destined to the remote network to go via the Epygi.

What is probably happening:
- The local PCs receive the PING
- The send a REPLY, but they send it to their default gateway (Windows Box)
- The windows box may try to forward the packet to the internet, or simply drop the packet.

[tritek]

This worked. I added static routes in Routing And Remote Access of my windows 2003 primary router that any requests/responses for clients on the remote subnets should be routed through my Epygi. I created this route on the LAN adapter. I can now ping from the epygi network to the proper remote ipsec network connected through the epygi.

One other question which I don't think is related to IPSec. My Epygi cannot ping by host name via Network Tools. Is this expected? Although it is not my primary LAN dhcp or dns server, I would expect it to be able to find hosts that are on the same LAN sub net. Does this mean that nodes on the remote IPSec networks won't be able to find nodes through the Epygi IPSec connection by host name? Do I need to register my primary DNS and/or DHCP server with the Epygi some how?


________
SQUIRTING AMATEUR