由买买提看人间百态

boards

本页内容为未名空间相应帖子的节选和存档,一周内的贴子最多显示50字,超过一周显示500字 访问原贴
EmergingNetworking版 - VPC networking 问题
相关主题
nonat是什么意思啊?问个简单的内网和外网的问题
请教一个问题, 兄弟是新手问个关于ping的网络问题。
I failed CCNA today...AWS VPC VPN gateway implementation
VPN 代理服务器请教VPN的问题
L2VPN VS VLANVPN question: without router it connects, with route it's n (转载)
为什么在家上了公司的VPN后就不能用家里的网络硬盘了?论网络工程师职业消亡之不可避免
如何在程序中判断该电脑是否在公司局域网内?有两层NAT下怎么设置VPN?
问个route table的问题有办法隐藏mac地址没有?
相关话题的讨论汇总
话题: connection话题: ip话题: vpn话题: adapter话题: ethernet
进入EmergingNetworking版参与讨论
1 (共1页)
T**r
发帖数: 7016
1
这儿高人多,来问题一个virtual machine网络设置问题,
我的laptop装的是WindowsXP sp3作为host,然后装了一个MS Virtual PC 2007,guest
OS是Windows Server 2008。
在家里我用wireless连接到home router,host和guest都用这个wireless 作为network
adapter,从这个router拿到两个动态IP,192.168.1.101和192.168.1.102。这个设
置是
工作的,host OS和guest OS都能连接internet,并且能相互看见。
问题在于,一旦我的host OS连接到公司的VPN上,我的host可以上公司的内部网,可以上
internet,但host和guest就失去联系了,guest也不能上internet。
请问高人们,我怎么样才能把guest也带到公司的VPN上面?
泄拉,
s*****g
发帖数: 1055
2
Seems that your VPN does not have split-tunnel enabled, so all traffic from
host is being tunneled to your VPN server. Simple way to verify this is to
point your browser to http://www.whatismyip.com, if the IP is your ISP, then your VPN has split-tunneling enabled, if the IP belongs to your VPN server, then split-tunnel is not enabled. split-tunnel policy is beyond your control.
It is also possible that your VPN client is getting the same subnet IP addresses from your VPN server, please post output of : route print and ipconfig
I don't think your guest can get on your VPN, assume you mean VPN is ipsecVPN, ipsec SA is created between a /32 address and your company's internal networks.

guest
network
以上

【在 T**r 的大作中提到】
: 这儿高人多,来问题一个virtual machine网络设置问题,
: 我的laptop装的是WindowsXP sp3作为host,然后装了一个MS Virtual PC 2007,guest
: OS是Windows Server 2008。
: 在家里我用wireless连接到home router,host和guest都用这个wireless 作为network
: adapter,从这个router拿到两个动态IP,192.168.1.101和192.168.1.102。这个设
: 置是
: 工作的,host OS和guest OS都能连接internet,并且能相互看见。
: 问题在于,一旦我的host OS连接到公司的VPN上,我的host可以上公司的内部网,可以上
: internet,但host和guest就失去联系了,guest也不能上internet。
: 请问高人们,我怎么样才能把guest也带到公司的VPN上面?

f*******8
发帖数: 3612
3
我猜测啊。
这是不是和vpn的类型有关。
layer3 的vpn是否都是split tunnel的。
现在是他两个机器用了同一个L2通道。如果vpn发生在L2,大概就成问题,
如果发生在L3,应该不影响。这说的对么?

from
个设

【在 s*****g 的大作中提到】
: Seems that your VPN does not have split-tunnel enabled, so all traffic from
: host is being tunneled to your VPN server. Simple way to verify this is to
: point your browser to http://www.whatismyip.com, if the IP is your ISP, then your VPN has split-tunneling enabled, if the IP belongs to your VPN server, then split-tunnel is not enabled. split-tunnel policy is beyond your control.
: It is also possible that your VPN client is getting the same subnet IP addresses from your VPN server, please post output of : route print and ipconfig
: I don't think your guest can get on your VPN, assume you mean VPN is ipsecVPN, ipsec SA is created between a /32 address and your company's internal networks.
:
: guest
: network
: 以上

z**r
发帖数: 17771
4
你这个是被公司的安全策略给block了,很多公司都有NAC这样的实施。你需要把
bridging方式改成NAT方式,只让host拿一个IP,guest os通过NAT出去就没问题了。

guest
network
以上

【在 T**r 的大作中提到】
: 这儿高人多,来问题一个virtual machine网络设置问题,
: 我的laptop装的是WindowsXP sp3作为host,然后装了一个MS Virtual PC 2007,guest
: OS是Windows Server 2008。
: 在家里我用wireless连接到home router,host和guest都用这个wireless 作为network
: adapter,从这个router拿到两个动态IP,192.168.1.101和192.168.1.102。这个设
: 置是
: 工作的,host OS和guest OS都能连接internet,并且能相互看见。
: 问题在于,一旦我的host OS连接到公司的VPN上,我的host可以上公司的内部网,可以上
: internet,但host和guest就失去联系了,guest也不能上internet。
: 请问高人们,我怎么样才能把guest也带到公司的VPN上面?

z**r
发帖数: 17771
5
老大,阅读不仔细啊,人家说的是VPC,不是VPN

from
addresses from your VPN server, please post output of : route print and
ipconfig
ipsecVPN, ipsec SA is created between a /32 address and your company's
internal networks.

【在 s*****g 的大作中提到】
: Seems that your VPN does not have split-tunnel enabled, so all traffic from
: host is being tunneled to your VPN server. Simple way to verify this is to
: point your browser to http://www.whatismyip.com, if the IP is your ISP, then your VPN has split-tunneling enabled, if the IP belongs to your VPN server, then split-tunnel is not enabled. split-tunnel policy is beyond your control.
: It is also possible that your VPN client is getting the same subnet IP addresses from your VPN server, please post output of : route print and ipconfig
: I don't think your guest can get on your VPN, assume you mean VPN is ipsecVPN, ipsec SA is created between a /32 address and your company's internal networks.
:
: guest
: network
: 以上

f*******8
发帖数: 3612
6
老大,人家好像是说了vpn,
是vpc和host公用一个wireless卡,
在host连了vpn后,vpc就不再能上网了。

to

【在 z**r 的大作中提到】
: 老大,阅读不仔细啊,人家说的是VPC,不是VPN
:
: from
: addresses from your VPN server, please post output of : route print and
: ipconfig
: ipsecVPN, ipsec SA is created between a /32 address and your company's
: internal networks.

z**r
发帖数: 17771
7
哈,原来俺看漏了。那用俺说的方法,也可以搞定。saiwong说的split tunnel这个需
要vpn server段允许才行,一般公司都不允许,客户端也无能为力

【在 f*******8 的大作中提到】
: 老大,人家好像是说了vpn,
: 是vpc和host公用一个wireless卡,
: 在host连了vpn后,vpc就不再能上网了。
:
: to

L******t
发帖数: 1985
8
这个是正解。
VMware Fusion里network adapter有NAT和Bridging两种模式。MS VPC应该类似。

【在 z**r 的大作中提到】
: 你这个是被公司的安全策略给block了,很多公司都有NAC这样的实施。你需要把
: bridging方式改成NAT方式,只让host拿一个IP,guest os通过NAT出去就没问题了。
:
: guest
: network
: 以上

s*****g
发帖数: 1055
9
Hmm, how does VPN server side know how many IP addresses you have or care
about how many IP addresses you have at all?
If LZ can post output of ipconfig and route print, that will help a lot.

【在 z**r 的大作中提到】
: 你这个是被公司的安全策略给block了,很多公司都有NAC这样的实施。你需要把
: bridging方式改成NAT方式,只让host拿一个IP,guest os通过NAT出去就没问题了。
:
: guest
: network
: 以上

f*******8
发帖数: 3612
10
是啊,我也在想,按说(想象中)上了vpc后,
如果是bridge模式,应该是vmware 或 ms virtual server suite
在网卡和IP之间加了个virtual switch, 此后host 和 vpc就是平等的。
如果是NAT模式,就是vmware在网卡后加了个virtual router.
如果是物理switch后面连两个电脑,一个上vpn,应该不影响另一个的功能。

【在 s*****g 的大作中提到】
: Hmm, how does VPN server side know how many IP addresses you have or care
: about how many IP addresses you have at all?
: If LZ can post output of ipconfig and route print, that will help a lot.

相关主题
为什么在家上了公司的VPN后就不能用家里的网络硬盘了?问个简单的内网和外网的问题
如何在程序中判断该电脑是否在公司局域网内?问个关于ping的网络问题。
问个route table的问题AWS VPC VPN gateway implementation
进入EmergingNetworking版参与讨论
T**r
发帖数: 7016
11
谢谢各位老大的回复,我今天晚上回去仔细研究各位的建议,然后再上来问。
请问这个NAT怎么设置呢,有没有科普的给初级菜人的砣砣锐。
z**r
发帖数: 17771
12
在你的VM软件中,肯定有这个选项的

【在 T**r 的大作中提到】
: 谢谢各位老大的回复,我今天晚上回去仔细研究各位的建议,然后再上来问。
: 请问这个NAT怎么设置呢,有没有科普的给初级菜人的砣砣锐。

z**r
发帖数: 17771
13
俺开始看成他是直接连到公司网络上,然后就不行了,所以觉得肯定是NAC问题。如果
是连到公司VPN上不行了的话,是split tunnel的问题,不过用NAT也可以解决,而且估
计是唯一方法。

【在 s*****g 的大作中提到】
: Hmm, how does VPN server side know how many IP addresses you have or care
: about how many IP addresses you have at all?
: If LZ can post output of ipconfig and route print, that will help a lot.

f*******8
发帖数: 3612
14

说实在的,我也开始就怀疑你是看到另一头去了,
没好意思说,心想老兄是不是边喝酒边troubleshooting啊。
不过也领教了你们的风格,就是以给solution为本。
care

【在 z**r 的大作中提到】
: 俺开始看成他是直接连到公司网络上,然后就不行了,所以觉得肯定是NAC问题。如果
: 是连到公司VPN上不行了的话,是split tunnel的问题,不过用NAT也可以解决,而且估
: 计是唯一方法。

T**r
发帖数: 7016
15
老大,我真的找到了那个选项,MS VPC的设置里有Shared Networking (NAT),现在
guest也
能上Internet,即使host连在VPN上时。
现在问题是,host想要比如说browse在guest上的web server (IIS),好象看不见,我
在股沟
上恶补了一下网络技术,发现要做一个什么forwarding,具体咋做呢,请指教。
host IP: 有好几个,192.168.1.101(家里router分配的),公司给的IP是
10.189.179.149,其它还有192.168.56.1, 192.168.191.1,应该是以前装vitualbox和
vmware遗留下来的。
guest IP: 192.168.131.66, gateway 192.168.131.254,

【在 z**r 的大作中提到】
: 在你的VM软件中,肯定有这个选项的
T**r
发帖数: 7016
16
老大,不好意思,这个贴比较长。
我把NAT搞定了,现在MSVPC guest也能上internet,即使host在公司的VPN上。但是
host
不能看到guest,guest却可以看到host(公司IP)。我需要host能看到guest,因为
guest上
有一些web application需要demo。
whatismyip.com显示两个是同一个IP,而且应该是我VPN的IP,我ISP的IP是75开头,公
司是
144开头。
下面是host 和guest的ipconfig 和route print,其中host里有一些vitualbox和
vmware的遗留下来的一些设置,以前装过,没有搞出来,现在用的是MS VPC。
******************
host ipconfig: *
******************
C:\Documents and Settings\ga2334>ipconfig
Windows IP Configuration
Ethernet adapter VMware Network Adapter VMnet8:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.191.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
Ethernet adapter VMware Network Adapter VMnet1:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.125.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
Ethernet adapter Wireless Network Connection:
Connection-specific DNS Suffix . : kc.rr.com
IP Address. . . . . . . . . . . . : 192.168.1.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DHCP Class ID . . . . . . . . . . :
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Ethernet adapter VirtualBox Host-Only Network:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.56.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
Ethernet adapter Local Area Connection 4:
Media State . . . . . . . . . . . : Media disconnected
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 10.189.179.149
Subnet Mask . . . . . . . . . . . : 255.255.240.0
Default Gateway . . . . . . . . . : 10.189.176.1
*****************
host route print*
*****************
C:\Documents and Settings\ga2334>route print
======================================================================
=====
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 50 56 c0 00 08 ...... VMware Virtual Ethernet Adapter for
VMnet8
0x3 ...00 50 56 c0 00 01 ...... VMware Virtual Ethernet Adapter for
VMnet1
0x4 ...00 24 d6 93 4d 5c ...... Intel(R) WiFi Link 5100 AGN - Teefer2
Miniport
0x5 ...00 26 b9 cb 1f e1 ...... Intel(R) 82567LM Gigabit Network
Connection - Te
efer2 Miniport
0x6 ...08 00 27 00 b0 13 ...... VirtualBox Host-Only Ethernet Adapter
- Teefer2
Miniport
0x10008 ...70 f1 a1 09 8d be ...... Bluetooth LAN Access Server Driver
- Teefer2
Miniport
0x10009 ...00 05 9a 3c 78 00 ...... Cisco Systems VPN Adapter -
Teefer2 Miniport
======================================================================
=====
======================================================================
=====
Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 10.189.176.1 10.189.179.149
1
10.189.176.0 255.255.240.0 10.189.179.149 10.189.179.149
25
10.189.179.149 255.255.255.255 127.0.0.1 127.0.0.1
25
10.255.255.255 255.255.255.255 10.189.179.149 10.189.179.149
25
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1
1
192.168.1.0 255.255.255.0 192.168.1.101 192.168.1.101
25
192.168.1.0 255.255.255.0 10.189.176.1 10.189.179.149
25
192.168.1.1 255.255.255.255 192.168.1.101 192.168.1.101
1
192.168.1.101 255.255.255.255 127.0.0.1 127.0.0.1
25
192.168.1.255 255.255.255.255 192.168.1.101 192.168.1.101
25
192.168.56.0 255.255.255.0 192.168.56.1 192.168.56.1
20
192.168.56.0 255.255.255.0 10.189.176.1 10.189.179.149
20
192.168.56.1 255.255.255.255 127.0.0.1 127.0.0.1
20
192.168.56.255 255.255.255.255 192.168.56.1 192.168.56.1
20
192.168.125.0 255.255.255.0 192.168.125.1 192.168.125.1
20
192.168.125.0 255.255.255.0 10.189.176.1 10.189.179.149
20
192.168.125.1 255.255.255.255 127.0.0.1 127.0.0.1
20
192.168.125.255 255.255.255.255 192.168.125.1 192.168.125.1
20
192.168.191.0 255.255.255.0 192.168.191.1 192.168.191.1
20
192.168.191.0 255.255.255.0 10.189.176.1 10.189.179.149
20
192.168.191.1 255.255.255.255 127.0.0.1 127.0.0.1
20
192.168.191.255 255.255.255.255 192.168.191.1 192.168.191.1
20
208.24.179.222 255.255.255.255 192.168.1.1 192.168.1.101
1
224.0.0.0 240.0.0.0 10.189.179.149 10.189.179.149
25
224.0.0.0 240.0.0.0 192.168.1.101 192.168.1.101
25
224.0.0.0 240.0.0.0 192.168.56.1 192.168.56.1
20
224.0.0.0 240.0.0.0 192.168.125.1 192.168.125.1
20
224.0.0.0 240.0.0.0 192.168.191.1 192.168.191.1
20
255.255.255.255 255.255.255.255 10.189.179.149 10.189.179.149
1
255.255.255.255 255.255.255.255 192.168.1.101 192.168.1.101
1
255.255.255.255 255.255.255.255 192.168.56.1 192.168.56.1
1
255.255.255.255 255.255.255.255 192.168.125.1 192.168.125.1
1
255.255.255.255 255.255.255.255 192.168.191.1 5
1
255.255.255.255 255.255.255.255 192.168.191.1 192.168.191.1
1
255.255.255.255 255.255.255.255 192.168.191.1 10008
1
Default Gateway: 10.189.176.1
======================================================================
=====
Persistent Routes:
None
********************
guest ipconfig
********************
C:\Windows\system32>ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::10bf:be9d:ada5:7200%10
IPv4 Address. . . . . . . . . . . : 192.168.131.66
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.131.254
Tunnel adapter Local Area Connection* 8:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter Local Area Connection* 11:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
**********************
guest route print
**********************
C:\Windows\system32>route print
======================================================================
=====
Interface List
12 ...00 03 ff 78 d7 bb ...... Intel 21140-Based PCI Fast Ethernet
Adapter (Emu
lated) #2
10 ...00 03 ff 7b d7 bb ...... Intel 21140-Based PCI Fast Ethernet
Adapter (Emu
lated)
1 ........................... Software Loopback Interface 1
11 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
13 ...00 00 00 00 00 00 00 e0 isatap.{F531BD1F-4B24-4437-A3B1-
785504256923}
14 ...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
======================================================================
=====
IPv4 Route Table
======================================================================
=====
Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.131.254 192.168.131.66
20
127.0.0.0 255.0.0.0 On-link 127.0.0.1
306
127.0.0.1 255.255.255.255 On-link 127.0.0.1
306
127.255.255.255 255.255.255.255 On-link 127.0.0.1
306
192.168.131.0 255.255.255.0 On-link 192.168.131.66
276
192.168.131.66 255.255.255.255 On-link 192.168.131.66
276
192.168.131.255 255.255.255.255 On-link 192.168.131.66
276
224.0.0.0 240.0.0.0 On-link 127.0.0.1
306
224.0.0.0 240.0.0.0 On-link 192.168.131.66
276
255.255.255.255 255.255.255.255 On-link 127.0.0.1
306
255.255.255.255 255.255.255.255 On-link 192.168.131.66
276
======================================================================
=====
Persistent Routes:
None
IPv6 Route Table
======================================================================
=====
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
10 276 fe80::/64 On-link
10 276 fe80::10bf:be9d:ada5:7200/128
On-link
1 306 ff00::/8 On-link
10 276 ff00::/8 On-link
======================================================================
=====
Persistent Routes:
None

traffic from
is to
ISP, then your VPN has split-tunneling enabled, if the IP belongs to
your VPN server, then split-tunnel is not enabled. split-tunnel policy
is beyond your control.
IP addresses from your VPN server, please post output of : route print
and ipconfig
ipsecVPN, ipsec SA is created between a /32 address and your company's
internal networks.

【在 s*****g 的大作中提到】
: Seems that your VPN does not have split-tunnel enabled, so all traffic from
: host is being tunneled to your VPN server. Simple way to verify this is to
: point your browser to http://www.whatismyip.com, if the IP is your ISP, then your VPN has split-tunneling enabled, if the IP belongs to your VPN server, then split-tunnel is not enabled. split-tunnel policy is beyond your control.
: It is also possible that your VPN client is getting the same subnet IP addresses from your VPN server, please post output of : route print and ipconfig
: I don't think your guest can get on your VPN, assume you mean VPN is ipsecVPN, ipsec SA is created between a /32 address and your company's internal networks.
:
: guest
: network
: 以上

z**r
发帖数: 17771
17
俺个人用virtual box,所以不清楚MS的VM怎么做port forwarding,但是稍微查查,应
该有文档的,而且配置起来肯定不会很复杂

【在 T**r 的大作中提到】
: 老大,我真的找到了那个选项,MS VPC的设置里有Shared Networking (NAT),现在
: guest也
: 能上Internet,即使host连在VPN上时。
: 现在问题是,host想要比如说browse在guest上的web server (IIS),好象看不见,我
: 在股沟
: 上恶补了一下网络技术,发现要做一个什么forwarding,具体咋做呢,请指教。
: host IP: 有好几个,192.168.1.101(家里router分配的),公司给的IP是
: 10.189.179.149,其它还有192.168.56.1, 192.168.191.1,应该是以前装vitualbox和
: vmware遗留下来的。
: guest IP: 192.168.131.66, gateway 192.168.131.254,

b******a
发帖数: 153
18
agree. I was wondering how Guest and host OS both used wireless card to get
two IPs. I almost think laptop
has two wireless cards...

【在 z**r 的大作中提到】
: 你这个是被公司的安全策略给block了,很多公司都有NAC这样的实施。你需要把
: bridging方式改成NAT方式,只让host拿一个IP,guest os通过NAT出去就没问题了。
:
: guest
: network
: 以上

1 (共1页)
进入EmergingNetworking版参与讨论
相关主题
有办法隐藏mac地址没有?L2VPN VS VLAN
Router-router VPN on dynamic IP possible??为什么在家上了公司的VPN后就不能用家里的网络硬盘了?
其实我有一个idea,share出来。如何在程序中判断该电脑是否在公司局域网内?
大家聊聊华为进入北美市场的门槛是什么?问个route table的问题
nonat是什么意思啊?问个简单的内网和外网的问题
请教一个问题, 兄弟是新手问个关于ping的网络问题。
I failed CCNA today...AWS VPC VPN gateway implementation
VPN 代理服务器请教VPN的问题
相关话题的讨论汇总
话题: connection话题: ip话题: vpn话题: adapter话题: ethernet