| Author |
Message |
JUVANUT
Guest
|
 Posted:
Mon Jan 31, 2005 2:01 am Post subject:
VPN Not Passing Traffic Anymore |
|
|
Have an SBS200 server using ISA for some time. Without any changes we know
of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
fine and shows connection with correct addresses, it just wont ping farther
that the addresss it gets, and cannot ping even to the address on the
internal nic on the SBS server. Any ideas? Thanks |
|
| Back to top |
|
 |
Marina Roos [SBS-MVP]
Guest
|
| Posted:
Mon Jan 31, 2005 6:47 am Post subject:
Re: VPN Not Passing Traffic Anymore |
|
|
Hi,
NetBIOS over TCP/IP should be disabled on the external nic. You can delete
the WINS address on the external nic.
Before rerunning ICW, you will have to delete the 2nd IP on the external nic
(why do you need it anyway?).
Make sure the internal nic is on top. Make sure you have applied the
regedits in 292822.
The dns suffix should only point to your local AD domain name.
Make sure RRAS is set to supply IP to your RAS clients through DHCP of the
SBS server.
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"JUVANUT" <JUVANUT@discussions.microsoft.com> schreef in bericht
news:812C80EA-E291-4B5C-B757-5F6D8623075D@microsoft.com...
| Quote: | Domain names, outside IP & MAC addresses have been changed for security
Server
Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : fs1
Primary DNS Suffix . . . . . . . : corp.acme.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : corp.acme.com
acme.com
Ethernet adapter LAN:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink 10/100 PCI For
Complete
PC Management NIC (3C905C-TX)
Physical Address. . . . . . . . . : 00-01-03-67-E7-1C
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.10
Primary WINS Server . . . . . . . : 10.0.0.10
Ethernet adapter zInternet:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NetServer 10/100TX PCI LAN Adapter
Physical Address. . . . . . . . . : 00-15-73-B9-BA-9B
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 168.123.123.132
Subnet Mask . . . . . . . . . . . : 255.255.255.240
IP Address. . . . . . . . . . . . : 168.123.123.131
Subnet Mask . . . . . . . . . . . : 255.255.255.240
IP Address. . . . . . . . . . . . : 168.123.123.130
Subnet Mask . . . . . . . . . . . : 255.255.255.240
Default Gateway . . . . . . . . . : 168.123.123.129
DNS Servers . . . . . . . . . . . : 10.0.0.10
Primary WINS Server . . . . . . . : 10.0.0.10
PPP adapter RAS Server (Dial In) Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.50.1
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 127.0.0.1
Workstation
Windows IP Configuration
Host Name . . . . . . . . . . . . : home
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : myisp.com
Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI
TX
NIC (3C905B-TX)
Physical Address. . . . . . . . . : 00-58-24-e6-28-71
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 12.34.56.64
12.34.56.65
12.34.56.63
Lease Obtained. . . . . . . . . . : Sunday, January 30, 2005
9:44:37
PM
Lease Expires . . . . . . . . . . : Sunday, February 06, 2005
9:44:37 PM
PPP adapter Acme:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.50.3
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 192.168.50.3
DNS Servers . . . . . . . . . . . : 10.0.0.10
Primary WINS Server . . . . . . . : 10.0.0.10
"Marina Roos [SBS-MVP]" wrote:
Can you post the ipconfig/all from the VPN client when vpn-ed into the
SBS
and the ipconfig from the SBS too please?
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"JUVANUT" <JUVANUT@discussions.microsoft.com> schreef in bericht
news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
Have an SBS200 server using ISA for some time. Without any changes we
know
of, we cannot connect via PPTP to hosts on the internal LAN. VPN
connects
fine and shows connection with correct addresses, it just wont ping
farther
that the addresss it gets, and cannot ping even to the address on the
internal nic on the SBS server. Any ideas? Thanks
|
|
|
| Back to top |
|
|
Robert L [MS-MVP]
Guest
|
| Posted:
Mon Jan 31, 2005 6:47 am Post subject:
Re: VPN Not Passing Traffic Anymore |
|
|
do you have NAT that is blocking the ping?
--
For more and other information, go to http://howtonetworking.com.
Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.
Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
"JUVANUT" <JUVANUT@discussions.microsoft.com> wrote in message
news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
| Quote: | Have an SBS200 server using ISA for some time. Without any changes we
know
of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
fine and shows connection with correct addresses, it just wont ping
farther
that the addresss it gets, and cannot ping even to the address on the
internal nic on the SBS server. Any ideas? Thanks |
|
|
| Back to top |
|
|
JUVANUT
Guest
|
| Posted:
Mon Jan 31, 2005 6:47 am Post subject:
Re: VPN Not Passing Traffic Anymore |
|
|
No, there is no NAT on either side of the SBS server. Tke client can only
ping it's own address, it can't reach anywhere else down the pike. I have
tested with a "bare naked" client connected to the Internet and was able to
connect and communicate with other PPTP VPNs.
"Robert L [MS-MVP]" wrote:
| Quote: | do you have NAT that is blocking the ping?
--
For more and other information, go to http://howtonetworking.com.
Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.
Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
"JUVANUT" <JUVANUT@discussions.microsoft.com> wrote in message
news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
Have an SBS200 server using ISA for some time. Without any changes we
know
of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
fine and shows connection with correct addresses, it just wont ping
farther
that the addresss it gets, and cannot ping even to the address on the
internal nic on the SBS server. Any ideas? Thanks
|
|
|
| Back to top |
|
|
Marina Roos [SBS-MVP]
Guest
|
| Posted:
Mon Jan 31, 2005 6:47 am Post subject:
Re: VPN Not Passing Traffic Anymore |
|
|
Can you post the ipconfig/all from the VPN client when vpn-ed into the SBS
and the ipconfig from the SBS too please?
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"JUVANUT" <JUVANUT@discussions.microsoft.com> schreef in bericht
news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
| Quote: | Have an SBS200 server using ISA for some time. Without any changes we
know
of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
fine and shows connection with correct addresses, it just wont ping
farther
that the addresss it gets, and cannot ping even to the address on the
internal nic on the SBS server. Any ideas? Thanks |
|
|
| Back to top |
|
|
JUVANUT
Guest
|
| Posted:
Mon Jan 31, 2005 6:47 am Post subject:
Re: VPN Not Passing Traffic Anymore |
|
|
Domain names, outside IP & MAC addresses have been changed for security
Server
Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : fs1
Primary DNS Suffix . . . . . . . : corp.acme.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : corp.acme.com
acme.com
Ethernet adapter LAN:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink 10/100 PCI For Complete
PC Management NIC (3C905C-TX)
Physical Address. . . . . . . . . : 00-01-03-67-E7-1C
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.10
Primary WINS Server . . . . . . . : 10.0.0.10
Ethernet adapter zInternet:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NetServer 10/100TX PCI LAN Adapter
Physical Address. . . . . . . . . : 00-15-73-B9-BA-9B
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 168.123.123.132
Subnet Mask . . . . . . . . . . . : 255.255.255.240
IP Address. . . . . . . . . . . . : 168.123.123.131
Subnet Mask . . . . . . . . . . . : 255.255.255.240
IP Address. . . . . . . . . . . . : 168.123.123.130
Subnet Mask . . . . . . . . . . . : 255.255.255.240
Default Gateway . . . . . . . . . : 168.123.123.129
DNS Servers . . . . . . . . . . . : 10.0.0.10
Primary WINS Server . . . . . . . : 10.0.0.10
PPP adapter RAS Server (Dial In) Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.50.1
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 127.0.0.1
Workstation
Windows IP Configuration
Host Name . . . . . . . . . . . . : home
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : myisp.com
Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI TX
NIC (3C905B-TX)
Physical Address. . . . . . . . . : 00-58-24-e6-28-71
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 12.34.56.64
12.34.56.65
12.34.56.63
Lease Obtained. . . . . . . . . . : Sunday, January 30, 2005 9:44:37
PM
Lease Expires . . . . . . . . . . : Sunday, February 06, 2005
9:44:37 PM
PPP adapter Acme:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.50.3
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 192.168.50.3
DNS Servers . . . . . . . . . . . : 10.0.0.10
Primary WINS Server . . . . . . . : 10.0.0.10
"Marina Roos [SBS-MVP]" wrote:
| Quote: | Can you post the ipconfig/all from the VPN client when vpn-ed into the SBS
and the ipconfig from the SBS too please?
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"JUVANUT" <JUVANUT@discussions.microsoft.com> schreef in bericht
news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
Have an SBS200 server using ISA for some time. Without any changes we
know
of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
fine and shows connection with correct addresses, it just wont ping
farther
that the addresss it gets, and cannot ping even to the address on the
internal nic on the SBS server. Any ideas? Thanks
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in