desktop remoto su 827

[visc@]

Ciao,
ho la necessità di permettere l'accesso in desktop remoto su un Win2000Srv.

le 2 sedi sono già collegate in tunnel GRE funzionante, ma non riesco ad accedere al server, quando inserisco nome utente e password mi restituisce il msg "Impossibile connettersi al computer remoto...."

cosa mi sfugge?

allego la configurazione dei due 827.

Router n. 1 lato ricevente:

version 12.1
no service single-slot-reload-enable
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Sede2
!
logging rate-limit console 10 except errors
enable password 7 xxxxxxxxxxx
!
ip subnet-zero
no ip finger
ip name-server 151.99.125.2
ip name-server 212.216.112.112
ip name-server 151.99.229.225
!
no ip dhcp-client network-discovery
!
!
!
interface Tunnel0
ip address 192.168.30.2 255.255.255.252
tunnel source ATM0.1
tunnel destination xx.yy.zz.241
tunnel mode ipip
!
interface Ethernet0
ip address 192.168.200.1 255.255.255.0
ip helper-address 192.168.200.0
ip nat inside
!
interface ATM0
no ip address
ip nat outside
no atm ilmi-keepalive
bundle-enable
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0.1 point-to-point
ip address xx.yy.zz.233 255.255.255.248
ip nat outside
pvc 8/35
protocol ip xx.yy.zz.233 broadcast
encapsulation aal5snap
!
!
ip classless
ip route 0.0.0.0 0.0.0.0 ATM0.1
ip route 192.168.100.0 255.255.255.0 Tunnel0
no ip http server
!
ip nat pool sede2 xx.yy.zz.235 xx.yy.zz.235 netmask 255.255.255.0
ip nat inside source list 1 pool sede2 overload
ip nat inside source route-map nonat pool sede1 overload
access-list 1 permit 192.168.200.0 0.0.0.255
access-list 101 deny ip 192.168.200.0 0.0.0.255 192.168.100.0 0.0.0.255
access-list 101 permit ip 192.168.200.0 0.0.0.255 any
route-map nonat permit 10
match ip address 101
!
!
line con 0
transport input none
stopbits 1
line vty 0 4
password 7 xxxxxxxxxxxxx
login
!
scheduler max-task-time 5000
end


Router n. 2 lato "chiamante"

version 12.1
no service single-slot-reload-enable
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Sede1
!
logging rate-limit console 10 except errors
enable password 7 xxxxxxxxxx
!
ip subnet-zero
no ip finger
ip name-server 151.99.125.2
ip name-server 151.99.250.2
ip name-server 151.99.229.225
!
no ip dhcp-client network-discovery
!
!
!
interface Tunnel0
ip address 192.168.30.1 255.255.255.252
tunnel source ATM0.1
tunnel destination xx.yy.zz.233
tunnel mode ipip
!
interface Ethernet0
ip address 192.168.100.1 255.255.255.0
ip helper-address 192.168.100.0
ip nat inside
!
interface ATM0
no ip address
ip nat outside
no atm ilmi-keepalive
bundle-enable
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0.1 point-to-point
ip address xx.yy.zz.241 255.255.255.248
ip nat outside
pvc 8/35
protocol ip xx.yy.zz.241 broadcast
encapsulation aal5snap
!
!
ip classless
ip route 0.0.0.0 0.0.0.0 ATM0.1
ip route 192.168.200.0 255.255.255.0 Tunnel0
no ip http server
!
ip nat pool sede1 xx.yy.zz.243 xx.yy.zz.243 netmask 255.255.255.0
ip nat inside source list 2 pool sede1 overload
ip nat inside source route-map nonat pool sede1 overload
access-list 1 permit 192.168.100.0 0.0.0.255
access-list 101 deny ip 192.168.100.0 0.0.0.255 192.168.200.0 0.0.0.255
access-list 101 permit ip 192.168.100.0 0.0.0.255 any
route-map nonat permit 10
match ip address 101
!
!
line con 0
transport input none
stopbits 1
line vty 0 4
password 7 xxxxxxxxxxxxxx
login
!
scheduler max-task-time 5000
end