XP NAT/ICS configuration for unusual situation

[VladimirTS]

I am setting up small home network. Host computer running Windows XP have
connection to community network (network connecting several houses in my city
and providing internet access) via Ethernet (ZNET, 192.168.*.* network Fixed
IP). Connection to Internet established by VPN (Internet , 10.10.*.* network,
DHCP) by connecting VPN server 192.168.0.8. Also I have local Bluetooth
network connecting host with my laptop 172.16.*.* network fixed IP.



Goal - I like to have internet and 192.168* network access from my laptop.



Question:

Is it possible to configure it using ICS XP feature or “netsh routing ip
nat”? I tried but without success.

Is it possible to somehow install ISA server on Windows XP?



I tried Kerio Winroute Firewall, works ok, but costs a lot L

Thanks,
Vladimir

[Robert L [MS-MVP]]

the ics should work. however, it is not recommended install vpn on the ics
computer. quoted from http://www.ChicagoTech.net
Do not install VPN on W2K with ICS running

Many users have reported that they were experienced some difficulties after
installing VPN on w2k/xp running ICS and ICS clients may receive "Error:
Page Can Not be Displayed" message. The reason is that establishing a VPN
connection on the ICS Host modifies the Routing Table on the ICS Host. that
will forces all clients that try to connect to the Internet to use the VPN
routing table instead of the ICS routing table used to connect to the
Internet service provider (ISP). You may modify the route table to fix this
problem, for example, route -p add <network> mask <subnet mask> <router ip>.
If you want to add a route for a single host (firewall which is on another
subnet), do this route -p add <ip> mask 255.255.255.255 <host ip>, for
example, route -p add 192.168.0.100 255.255.255.255 160.213.320.1.
--
For more and other information, go to http://www.ChicagoTech.net


Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
Networking Solutions, http://www.chicagotech.net/networksolutions.htm
VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
VPN Process and Error Analysis, http://www.chicagotech.net/VPN%20process.htm
VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
This posting is provided "AS IS" with no warranties.
"VladimirTS" > wrote in message
...
>I am setting up small home network. Host computer running Windows XP have
> connection to community network (network connecting several houses in my
> city
> and providing internet access) via Ethernet (ZNET, 192.168.*.* network
> Fixed
> IP). Connection to Internet established by VPN (Internet , 10.10.*.*
> network,
> DHCP) by connecting VPN server 192.168.0.8. Also I have local Bluetooth
> network connecting host with my laptop 172.16.*.* network fixed IP.
>
>
>
> Goal - I like to have internet and 192.168* network access from my laptop.
>
>
>
> Question:
>
> Is it possible to configure it using ICS XP feature or "netsh routing ip
> nat"? I tried but without success.
>
> Is it possible to somehow install ISA server on Windows XP?
>
>
>
> I tried Kerio Winroute Firewall, works ok, but costs a lot L
>
> Thanks,
> Vladimir
>

[Doug Sherman [MVP]]

The MS VPN client allows you to to enable Internet sharing on the
connection. However, when you do this, the IP address of the LAN adapter
must be set to 192.168.0.1.

If you have XP Pro, try connecting to Remote Desktop and see if the laptop
can get to the Internet that way.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"VladimirTS" > wrote in message
...
> I am setting up small home network. Host computer running Windows XP have
> connection to community network (network connecting several houses in my
city
> and providing internet access) via Ethernet (ZNET, 192.168.*.* network
Fixed
> IP). Connection to Internet established by VPN (Internet , 10.10.*.*
network,
> DHCP) by connecting VPN server 192.168.0.8. Also I have local Bluetooth
> network connecting host with my laptop 172.16.*.* network fixed IP.
>
>
>
> Goal - I like to have internet and 192.168* network access from my laptop.
>
>
>
> Question:
>
> Is it possible to configure it using ICS XP feature or "netsh routing ip
> nat"? I tried but without success.
>
> Is it possible to somehow install ISA server on Windows XP?
>
>
>
> I tried Kerio Winroute Firewall, works ok, but costs a lot L
>
> Thanks,
> Vladimir
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.789 / Virus Database: 534 - Release Date: 11-7-2004

[VladimirTS]

Thank you for answer, Robert.

Do you know hot to prevent ICS setting 192.168.0.1 address to host adapter?
Actually ZNET (192.168.21.44) adapter connects to community network and I do
not like to change this address. I like to build private network on bluetooth
PAN adapter but ICS do not allow to set such adapter for private network.

any ideas?

is it possible to manage ICS from some command line interface to have access
to full features?

is netsh right command tool to do this?

"Robert L [MS-MVP]" wrote:

> the ics should work. however, it is not recommended install vpn on the ics
> computer. quoted from http://www.ChicagoTech.net
> Do not install VPN on W2K with ICS running
>
> Many users have reported that they were experienced some difficulties after
> installing VPN on w2k/xp running ICS and ICS clients may receive "Error:
> Page Can Not be Displayed" message. The reason is that establishing a VPN
> connection on the ICS Host modifies the Routing Table on the ICS Host. that
> will forces all clients that try to connect to the Internet to use the VPN
> routing table instead of the ICS routing table used to connect to the
> Internet service provider (ISP). You may modify the route table to fix this
> problem, for example, route -p add <network> mask <subnet mask> <router ip>.
> If you want to add a route for a single host (firewall which is on another
> subnet), do this route -p add <ip> mask 255.255.255.255 <host ip>, for
> example, route -p add 192.168.0.100 255.255.255.255 160.213.320.1.
> --
> For more and other information, go to http://www.ChicagoTech.net
>
>
> Don't send e-mail or reply to me except you need consulting services.
> Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
> http://www.ChicagoTech.net
> Networking Solutions, http://www.chicagotech.net/networksolutions.htm
> VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
> VPN Process and Error Analysis, http://www.chicagotech.net/VPN%20process.htm
> VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
> This posting is provided "AS IS" with no warranties.
> "VladimirTS" > wrote in message
> ...
> >I am setting up small home network. Host computer running Windows XP have
> > connection to community network (network connecting several houses in my
> > city
> > and providing internet access) via Ethernet (ZNET, 192.168.*.* network
> > Fixed
> > IP). Connection to Internet established by VPN (Internet , 10.10.*.*
> > network,
> > DHCP) by connecting VPN server 192.168.0.8. Also I have local Bluetooth
> > network connecting host with my laptop 172.16.*.* network fixed IP.
> >
> >
> >
> > Goal - I like to have internet and 192.168* network access from my laptop.
> >
> >
> >
> > Question:
> >
> > Is it possible to configure it using ICS XP feature or "netsh routing ip
> > nat"? I tried but without success.
> >
> > Is it possible to somehow install ISA server on Windows XP?
> >
> >
> >
> > I tried Kerio Winroute Firewall, works ok, but costs a lot L
> >
> > Thanks,
> > Vladimir
> >
>
>
>

[Robert L [MS-MVP]]

quoted from http://www.ChicagoTech.net

Can I have ICS to use a different IP range other than 192.168.0.1



Yes, it works for windows 2000. The test on XP also works. However, it is
not recommended for the XP or it may bring some issues.


--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
Networking Solutions, http://www.chicagotech.net/networksolutions.htm
VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
VPN Process and Error Analysis, http://www.chicagotech.net/VPN%20process.htm
VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
This posting is provided "AS IS" with no warranties.
"VladimirTS" > wrote in message
...
> Thank you for answer, Robert.
>
> Do you know hot to prevent ICS setting 192.168.0.1 address to host
> adapter?
> Actually ZNET (192.168.21.44) adapter connects to community network and I
> do
> not like to change this address. I like to build private network on
> bluetooth
> PAN adapter but ICS do not allow to set such adapter for private network.
>
> any ideas?
>
> is it possible to manage ICS from some command line interface to have
> access
> to full features?
>
> is netsh right command tool to do this?
>
> "Robert L [MS-MVP]" wrote:
>
>> the ics should work. however, it is not recommended install vpn on the
>> ics
>> computer. quoted from http://www.ChicagoTech.net
>> Do not install VPN on W2K with ICS running
>>
>> Many users have reported that they were experienced some difficulties
>> after
>> installing VPN on w2k/xp running ICS and ICS clients may receive "Error:
>> Page Can Not be Displayed" message. The reason is that establishing a VPN
>> connection on the ICS Host modifies the Routing Table on the ICS Host.
>> that
>> will forces all clients that try to connect to the Internet to use the
>> VPN
>> routing table instead of the ICS routing table used to connect to the
>> Internet service provider (ISP). You may modify the route table to fix
>> this
>> problem, for example, route -p add <network> mask <subnet mask> <router
>> ip>.
>> If you want to add a route for a single host (firewall which is on
>> another
>> subnet), do this route -p add <ip> mask 255.255.255.255 <host ip>, for
>> example, route -p add 192.168.0.100 255.255.255.255 160.213.320.1.
>> --
>> For more and other information, go to http://www.ChicagoTech.net
>>
>>
>> Don't send e-mail or reply to me except you need consulting services.
>> Posting on MS newsgroup will benefit all readers and you may get more
>> help.
>>
>> Bob Lin, MS-MVP, MCSE & CNE
>> Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
>> http://www.ChicagoTech.net
>> Networking Solutions, http://www.chicagotech.net/networksolutions.htm
>> VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
>> VPN Process and Error Analysis,
>> http://www.chicagotech.net/VPN%20process.htm
>> VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
>> This posting is provided "AS IS" with no warranties.
>> "VladimirTS" > wrote in message
>> ...
>> >I am setting up small home network. Host computer running Windows XP
>> >have
>> > connection to community network (network connecting several houses in
>> > my
>> > city
>> > and providing internet access) via Ethernet (ZNET, 192.168.*.* network
>> > Fixed
>> > IP). Connection to Internet established by VPN (Internet , 10.10.*.*
>> > network,
>> > DHCP) by connecting VPN server 192.168.0.8. Also I have local Bluetooth
>> > network connecting host with my laptop 172.16.*.* network fixed IP.
>> >
>> >
>> >
>> > Goal - I like to have internet and 192.168* network access from my
>> > laptop.
>> >
>> >
>> >
>> > Question:
>> >
>> > Is it possible to configure it using ICS XP feature or "netsh routing
>> > ip
>> > nat"? I tried but without success.
>> >
>> > Is it possible to somehow install ISA server on Windows XP?
>> >
>> >
>> >
>> > I tried Kerio Winroute Firewall, works ok, but costs a lot L
>> >
>> > Thanks,
>> > Vladimir
>> >
>>
>>
>>