Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

A VPN client computer that is running Windows XP or Windows Server 2003 may be unable to access resources on the remote network


View products that this article applies to.

Symptoms

When a computer that is running Windows XP or Windows Server 2003 tries to set up a VPN connection to a remote network, the connection is set up successfully. However, the computer may be unable to access the resources on the remote network.

This problem occurs when the remote network's Dynamic Host Configuration Protocol (DHCP) server uses the 249 Classless Static Routes DHCP scope option.

↑ Back to the top


Cause

This problem occurs when the routing table on the VPN client computer is not updated. This problem may also occur when the subnet masks are incorrect, even though the routing table is updated.

After the VPN connection is set up, the client computer sends DHCPInform packets to the DHCP server to obtain the DHCP server scope options. If the 249 Classless Static Routes DHCP scope option is configured on the DHCP server, the server sends both classful and classless routes to the client computer. However, this problem occurs when the routing table on the client computer cannot be updated with the classless routes. This problem may also occur when the routing table can be updated, but the subnet masks are wrong.

For example, when the routing table on the client computer is updated, you expect the subnet masks to appear as 255.240.0.0. However, the subnet masks may appear as 255.0.0.240. In this example, the second octet is moved to the fourth octet. When you run the route print command at a command prompt, the route table may resemble the following:
Network Destination      Netmask           Gateway          Interface     Metric
      <dest addr>      255.255.0.0        <gateway>        <client>       20
      <dest addr>      255.0.0.240        <gateway>        <client>       20

↑ Back to the top


Workaround

To work around this problem, use conventional classful addressing in the network. For example, use 255.0.0.0, 255.255.0.0, or 255.255.255.0.

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


More information

The 249 Classless Static Routes DHCP scope option specifies a set of classless routes that are added to the IPv4 routing table of the DHCP client.

For more information about DHCP options, click the following article number to view the article in the Microsoft Knowledge Base:
121005 DHCP options supported by clients
For more information about DHCP, visit the following Microsoft Web site:

↑ Back to the top


Keywords: KB942436, kbexpertiseinter, kbprb, kbtshoot

↑ Back to the top

Article Info
Article ID : 942436
Revision : 2
Created on : 9/23/2011
Published on : 9/23/2011
Exists online : False
Views : 267