VPN between two offices without an MS server on one side

[Charly]

Hello World,

Here is the setup I have :

The head-quarter office has the regular config : some Windows servers,
windows worstations, on a LAN with an Internet access. One server
manages the Internet access, another server hosts an Oracle database.
LAN IP is : 192.168.0.xxx

The branch office has only workstations (XP Pro) on a LAN with an
Internet access. LAN IP is 192.168.1.xxx

I'm trying to set up a VPN between the two offices, in order to share
remote ressources.

So far I came to that :
- the VPN is set up and OK : the "internet" server in the HQ acts as
VPN server, one workstation of the branch office is connected.
- the workstation witht the VPN in the branch office can see all
the HQ LAN (others computers, printers, etc). In particular
the Oracle server. This computer has then 2 NICs : one real with
address 192.168.1.aaa, and one virtual for the VPN with address
192.168.0.bbb.
- I set the route on the oracle server so that it knows the path
to the branch office LAN (via the VPN server)
- I set the route on the workstations of the branch office so
that they know the path to the HQ LAN (via the workstation
with the VPN connected).
- On the workstation connected to the VPN in the branch office
I set the registery key "IpEnableRouter" = 1 in
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
and the computer has been restarted.

and ... nothing.

The workstations in the branch office cannot see none of the devices of
the HQ LAN. I've done this elsewhere with OpenVPN instead of MS VPN, and
it worked.

Do I miss something ? Some build-in limitation in WinXP ? I searched the
web without result about that case.

Thanks for your help,

Charly