Dual NICs on Server 2003 routing issue

[guest]

I have a bit of a conundrum in configuration that I am unable to resolve
and would appreciate any help. On a new Windows 2003 server which is a
stand alone server in an existing AD domain we have 2 NICS installed. The
settings are as follows:
OUTSIDE: IP 192.168.1.2, Subnet 255.255.255.0, Gateway 192.168.1.1.
INSIDE: IP 192.168.87.153, Subnet 255.255.255.0, Gateway 192.168.87.1

They are configured that way because we have people accessing the server
remotely to set up software so the outside NIC is connected to a router and
then a cable modem. The inside joins it to the domain where users are
accessing the server. We have a remote site that has VPN set up to the
site on the 192.168.87.x subnet. When the OUTSIDE is enabled, the remote
site cannot ping the 192.168.87.153 IP - It times out. If I disable the
outside they can ping it without issue. I have changed the configuration
around, removing gateways, setting the INSIDE as primary etc but to no
effect. As it currently stands, If I disable the OUTSIDE, everything works
but the software developers cannot RDP in. If I enable it, the developers
can come in, local users can connect without issue but the remote site
cannot?

I assume that I might have to add a static route somewhere but just cannot
get the right configuration? If anyone has any expertise in this area I
would greatly appreciate the help.

[chicagotech]

You should not have two default gateways on the computer. The only
default gateway setting should be on the outside NIC pointing to the router. The gateway setting on the inside NIC should be blank.

To route a particular set of addresses to some other
gateway you need to use static routing.

For example, to send all traffic for the subnet 10.0.1.0/24 to a router at
192.168.87.1 the command would be

route add 10.0.1.0 255.255.255.0 192.168.87.1

With that route in place, any traffic for an address beginning with
10.0.1 would be directed to the router at 192.168.87.1 through interface
192.168.87.153 (ie the inside NIC).

Remember to add the -p option to the command so that it survives a
reboot.

[blin]

Make sure you don't have multiple default gateways. this post may help: How to delete multiple default gateways - http://www.chicagotech.net/netforums/vi ... 261#p21261