Windows Server

Dhigha D Sekara · Guest

David,
Can you also check if there are any event logs on the server( both
application and system)...

looks like the TCP connection between the client and the server is getting
reset for some reason..

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup

"Dhigha D Sekaran<msft>" <dhigha@online.microsoft.com> wrote in message
news:ebo9vK68EHA.1524@TK2MSFTNGP09.phx.gbl...

Dhigha D Sekara · Guest

David,
Looks like we have tracked down the issue you are having.

The crux of the problem seems to be the fact that your server has multiple
NICs with two IP addresses.

lcs.domain.com which I assume is your server has two IP addresses
192.168.0.53 and 192.168.0.56

Initially when the client connects to the server it sends all request to
192.168.0.53.
I guess you have either manually pointed your client to 192.168.0.53 or your
autoconfiguration via DNS SRV lookup is pointing to 192.168.0.53.

Subsequently when the client tries to establish a INVITE session it will
route the ACK using the Record-Route header received in the 200 OK response
to the INVITE it sent.
here the record-route is Record-Route:
<sip:lcs.domain.com;transport=tcp;lr;ms-route-sig=gawtglrX2q1PIWXWF9n4CIuDNWF8rZ>
But now lcs.domain.com resolves to the IP address 192.168.0.56 and the
client establishes a new TCP connection to the server and sends the ACK...
Our server doesnt persist connections established via ACK and will reset
this connection after few seconds. So Subsequent MESSAGEs in this new
connection will fail.

The same can also be explained for your sporadic failure to add Contacts/
set Permissions etc as theses requests will be sent with in the Subscription
dialog by following the record route headers in the 200 OK response to
Subscribes.
I can go in to more details if you are interested.

The resolution for the issue is:
1) TLS would work perfectly fine as the always exsisting connection is used
and no new connection is established.
2) If you are using TCP make sure the client always resolves and connects to
only one IP address of the server.

Can you please try this out and let us know if it works?
thanks for you help,
Dhigha

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup

"Dhigha D Sekaran<msft>" <dhigha@online.microsoft.com> wrote in message
news:OQjLQW98EHA.208@TK2MSFTNGP12.phx.gbl...

Bob Christian · Guest

Dhigha from Microsoft covered the trace extremely well. By the time I got
into the headers my brain started to hurt. The MS folks are great!

Based upon Dhigha's information (IPs .53 and .56) and your information on
01-03 (that you had dual NICs with ISA (generally one is internal and one is
external (even if it is an internal IP being NATted, in the case of some
segmented labs))).

Can you turn off DNS registration on the external NIC and clean that IP out
of DNS? Turning off the setting is fairly easy. Go into the TCP/IP
properties for the NIC...Advanced settings...DNS tab. At the very bottom
there is a checkbox for [ ]register this connecion... Uncheck that box and
OK out of everything. That way there is only one IP that is associated with
the DNS for that server.

NOTE: I can't guarantee that this will not break anything on the other side
of the ISA server.

Bob
"David Lewis" <user@microsoft.com> wrote in message
news:ob8pt0tgp6tsuh5m0qs36g9cbreqdrai8f@4ax.com...

David Lewis · Guest

There is nothing special with my desktop, infact its a brand new dell precision workstation
so there shouldn't be any old junk programs on it messing it up. The test laptop that "install"
was on is relatively untouched also.

not sure if this makes a difference, but the LCS server is on a server with dual nic's running
ISA. Both nic's are internal. IE I have a real hardware firewall and am not using the firewall functionality
of ISA. This server is my test server and I am testing both ISA and LCS. I just havn't had the time
yet to put LCS on its own server to see if ISA is causing a problem. Maybe next week :)

"Dhigha D Sekaran<msft>" <dhigha@online.microsoft.com>
|>David,
|>Can you also check if there are any event logs on the server( both
|>application and system)...
|>
|>looks like the TCP connection between the client and the server is getting
|>reset for some reason..

Bob Christian · Guest

David:

I am not sure if you are using the newsgroup browser at Microsoft or not,
but check the other sub-thread. I wanted to see if you could change some
DNS registration settings for your server and see if that may clear things
up a little.

Bob
"David Lewis" <user@microsoft.com> wrote in message
news:194st0l50gdtbrsktedgkrdekfsk22mo71@4ax.com...

David Lewis · Guest

I didn't know about the turn off dns setting. I have done that and will test on monday.
thankx.

"Bob Christian" <BobChristian@removethis.gmail.com>
|>Dhigha from Microsoft covered the trace extremely well. By the time I got
|>into the headers my brain started to hurt. The MS folks are great!
|>
|>Based upon Dhigha's information (IPs .53 and .56) and your information on
|>01-03 (that you had dual NICs with ISA (generally one is internal and one is
|>external (even if it is an internal IP being NATted, in the case of some
|>segmented labs))).
|>
|>Can you turn off DNS registration on the external NIC and clean that IP out
|>of DNS? Turning off the setting is fairly easy. Go into the TCP/IP
|>properties for the NIC...Advanced settings...DNS tab. At the very bottom
|>there is a checkbox for [ ]register this connecion... Uncheck that box and
|>OK out of everything. That way there is only one IP that is associated with
|>the DNS for that server.
|>
|>NOTE: I can't guarantee that this will not break anything on the other side
|>of the ISA server.
|>
|>Bob
|>"David Lewis" <user@microsoft.com> wrote in message
|>news:ob8pt0tgp6tsuh5m0qs36g9cbreqdrai8f@4ax.com...
|>

David Lewis · Guest

I turned off the dns setting for the .56 connection and will test it on Monday.
Then I might try the TLS recommendation

"Dhigha D Sekaran<msft>" <dhigha@online.microsoft.com>
|>David,
|>Looks like we have tracked down the issue you are having.
|>
|>The crux of the problem seems to be the fact that your server has multiple
|>NICs with two IP addresses.
|>
|>lcs.domain.com which I assume is your server has two IP addresses
|>192.168.0.53 and 192.168.0.56
|>
|>Initially when the client connects to the server it sends all request to
|>192.168.0.53.
|>I guess you have either manually pointed your client to 192.168.0.53 or your
|>autoconfiguration via DNS SRV lookup is pointing to 192.168.0.53.
|>
|>Subsequently when the client tries to establish a INVITE session it will
|>route the ACK using the Record-Route header received in the 200 OK response
|>to the INVITE it sent.
|>here the record-route is Record-Route:
|><sip:lcs.domain.com;transport=tcp;lr;ms-route-sig=gawtglrX2q1PIWXWF9n4CIuDNWF8rZ>
|>But now lcs.domain.com resolves to the IP address 192.168.0.56 and the
|>client establishes a new TCP connection to the server and sends the ACK...
|>Our server doesnt persist connections established via ACK and will reset
|>this connection after few seconds. So Subsequent MESSAGEs in this new
|>connection will fail.
|>
|>The same can also be explained for your sporadic failure to add Contacts/
|>set Permissions etc as theses requests will be sent with in the Subscription
|>dialog by following the record route headers in the 200 OK response to
|>Subscribes.
|>I can go in to more details if you are interested.
|>
|>The resolution for the issue is:
|>1) TLS would work perfectly fine as the always exsisting connection is used
|>and no new connection is established.
|>2) If you are using TCP make sure the client always resolves and connects to
|>only one IP address of the server.
|>
|>Can you please try this out and let us know if it works?
|>thanks for you help,
|>Dhigha

Bob Christian · Guest

Thanks for the follow-up!

Bob
"David Lewis" <user@microsoft.com> wrote in message
news:1hr0u09l0c97fjaaqivt99t9quenrd9esp@4ax.com...

David Lewis · Guest

Dhigha D Sekara · Guest

cool...glad you got it working..

http://office.microsoft.com/en-us/FX010908711033.aspx has the feature list
and other customer scenarios of LCS...

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup

"David Lewis" <user@microsoft.com> wrote in message
news:1fg6u05erri3peab970cet8ggaap0l2ieh@4ax.com...

LCS not as stable as .net messenger service? Goto page Previous 1, 2

	Windows Server Forum Index -> Live Communications Server	All times are GMT Goto page Previous 1, 2
Page 2 of 2