You don't say what client you're using, so here goes my best guesses: 1. You have to allow IP routing in RRAS IP properties to use resources other than those provided by the RRAS server itself. 2. W9x , WME, XP Home clients can't connect "as", so the default user may not have rights, regardless of the VPN credentials. 3. If you're trying to connect or map via names and don't have WINS (for W9x, ME) or DNS (W2K, XP pro) for name resolution, it'll fail. 4. The 32-bit mask and default gateway is correct for VPN clients; the routing is handled by RRAS. This is also the reason you can't resolve machine names via NetBIOS broadcast; your subnet is limited to the local machine, so you can only broadcast to yourself. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Bryan Andrews" <bandrews@xxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, August 05, 2001 11:09 AM Subject: [isalist] VPN issues... http://www.ISAserver.org I have my vpn setup with a single internal subnet (same as the internal nic on isa). I am having problems mapping to file shares and getting back out to the internet. I do not have wins running and am trying to connect via \\10.0.0.20\c$ or \\servername.mydomain.com\c$ to no avail. I can hit my internal website from the client though. I notcie on my vpn ppp/slip interface it says I have a subnet mask of 255.255.255.255. Is that correct? It also has the clients own ip (that it got from dhcp) as the default gateway. Any ideas are appreciated. I'd rather not use wins if I don't have to. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')