Re: Unable to connect to SBS2000 remotely

Thanks Dave for suggestion.

The static ip address assigned by the ISP to log into the router via a web
browser, as per the router manual is 192.168.1.254. We can log into the
router with this ip address via the laptop which is not on the customers
network, but are unable to log into the router with this ip address directly
from the servers web browser!!!

"David Hellewell" wrote:

> Try using the static ip address of the router assigned by your isp eg.
> http://123.456.789.012/
>
> Regards
> David Hellewell
> "jeffuk123" <jeffuk123@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:7498BAA4-5764-4945-A802-BD0BE6B47666@xxxxxxxxxxxxxxxx
> > Thanks for your reply. The ISP are not very helpful when we speak to them
> > over the telephone. I don't think they are really too sure of the problem.
> > We
> > DO get internet access from all workstations and the server, just can't
> > log
> > into the router from the server!!!
> >
> > "SuperGumby [SBS MVP]" wrote:
> >
> >> Sorry, if I had anything more for you I would have included it.
> >>
> >> I don't understand why you can sometimes ping but not at other times, yet
> >> it
> >> seems the internet connection is always available (to client PC's if not
> >> the
> >> server).
> >>
> >> The router may not allow remote logon but I would expect it to allow
> >> logon
> >> from the routed subnet.
> >>
> >> I have some pure conjecture about why you're getting the 81.whatever
> >> addresses but I'm not prepared to put my money where my mouth is.
> >>
> >> I believe you need someone onsite, hopefully someone familiar with both
> >> the
> >> ISP service(and equipment) and SBS/ISA. As I'm in AU I'm not
> >> volunteering.
> >>
> >> "jeffuk123" <jeffuk123@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> news:E8F3B186-549E-4E6D-AEFA-D559B4108C79@xxxxxxxxxxxxxxxx
> >> > Many thanks for reply. So what do you suggest? The firewall settings on
> >> > the
> >> > router are configured to allow all applications as suggested by ISP.
> >> >
> >> > "SuperGumby [SBS MVP]" wrote:
> >> >
> >> >> No Merv, he is using the router in pure router mode to service a
> >> >> routed
> >> >> subnet, not NAT mode. The router is configured properly, it would
> >> >> seem,
> >> >> for
> >> >> this scenario. This scenario does not have a private range on the SBS
> >> >> external.
> >> >>
> >> >> I was going to suggest opening a packet filter to allow
> >> >> SBS->routerIP:80,
> >> >> but this doesn't explain why the router is sometimes/not pingable.
> >> >>
> >> >> It is quite possible that the ISP and router setup could be modified
> >> >> to
> >> >> act
> >> >> in NAT mode but sometimes it is not only the router config which needs
> >> >> changing. Me? I'd probably throw one of the spare NAT routers in the
> >> >> mix,
> >> >> see if the problem happens, but not everyone has a couple of spare NAT
> >> >> routers laying around.
> >> >>
> >> >> "Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
> >> >> news:eqvVDWGZFHA.3272@xxxxxxxxxxxxxxxxxxxxxxx
> >> >> > Hi Jeff,
> >> >> >
> >> >> > The router has two interfaces (subnets): an public and a private.
> >> >> > The
> >> >> > public faces the Internet and is configured with the ISP assigned IP
> >> >> > address information. The private subnet may then be something like:
> >> >> > 192.168.0.1. You should remove the WAN IP address (ISP assigned IP
> >> >> > address) from the external NIC and give it a private address. Then
> >> >> > enter
> >> >> > the WAN IP address in the router itself.
> >> >> >
> >> >> > The following link details how to set this up for SBS 2000...
> >> >> >
> >> >> > Two Nics, a static IP address, ISA, router
> >> >> > http://www.smallbizserver.net/Default.aspx?tabid=154
> >> >> >
> >> >> > --
> >> >> > Merv Porter [SBS MVP]
> >> >> > ===================================
> >> >> > "jeffuk123" <jeffuk123@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> >> > news:8ACBE3C6-6A71-4B31-94F2-8E4C6AEA0B9E@xxxxxxxxxxxxxxxx
> >> >> >> Hi everyone,
> >> >> >>
> >> >> >> This message comes from the UK.
> >> >> >>
> >> >> >> One of our customers has Small Business Server 2000 and ISA 2000
> >> >> >> installed.
> >> >> >> They have access to the Internet and network resources work ok.
> >> >> >> DHCP
> >> >> >> is
> >> >> >> assigned via the server and all DNS tests show as passed with no
> >> >> >> errors
> >> >> >> in
> >> >> >> the event log either. DHCP is disabled on the router.
> >> >> >>
> >> >> >> The server has 2 network cards for both internal and external
> >> >> >> connections.
> >> >> >>
> >> >> >> The ADSL broadband router is attached directly to the external
> >> >> >> card.
> >> >> >>
> >> >> >> The internal NIC has the following settings:-
> >> >> >>
> >> >> >> IP OF NIC -192.168.16.2
> >> >> >> SUBNET - 255.255.255.0
> >> >> >> DNS - 192.168.16.2
> >> >> >>
> >> >> >> The external NIC has the following settings:-
> >> >> >>
> >> >> >> IP OF NIC - 217.35.109.233
> >> >> >> SUBNET - 255.255.255.248
> >> >> >> DEFAULT GATEWAY - 217.35.109.238
> >> >> >> DNS - 192.168.16.2
> >> >> >>
> >> >> >> When configuring the internet connection wizard in SBS2000, we have
> >> >> >> obviously input the DNS settings provided by the ISP which shows on
> >> >> >> the
> >> >> >> 'forwarders' tab in the DNS console as they should with the ISP DNS
> >> >> >> settings.
> >> >> >>
> >> >> >> However, we have never been able to log into the ADSL broadband
> >> >> >> router
> >> >> >> remotely, or directly from the server. We connected the router
> >> >> >> directly
> >> >> >> to a
> >> >> >> laptop (which we gave a static ip address) and were able to log
> >> >> >> into
> >> >> >> the
> >> >> >> router. The laptop is not on the actual network and does not have a
> >> >> >> firewall
> >> >> >> installed. When we connected the router back to the server, we can
> >> >> >> ping
> >> >> >> the
> >> >> >> router but not log in. But, after a short time we are unable to
> >> >> >> ping
> >> >> >> the
> >> >> >> router from the server.
> >> >> >>
> >> >> >> We have checked and double-checked router settings and believe all
> >> >> >> is
> >> >> >> as
> >> >> >> should be.
> >> >> >>
> >> >> >> If we set the laptop to obtain an ip address automatically, it gets
> >> >> >> assigned
> >> >> >> an ip address, we think is from the router which begins with
> >> >> >> 81.x.x.x
> >> >> >> We
> >> >> >> can't understand this as we have disabled DHCP on the router! There
> >> >> >> is
> >> >> >> no
> >> >> >> problem adding PCs to the network, as they are done via DHCP from
> >> >> >> the
> >> >> >> server.
> >> >> >>
> >> >> >> We think it may be to do with the ISA firewall, particularly as the
> >> >> >> web
> >> >> >> browser page when logging into the router from the server shows
> >> >> >> 'The
> >> >> >> page
> >> >> >> cannot be displayed' and 'HTTP 502 Proxy Error - Host is
> >> >> >> unreachable.
> >> >> >> For
> >> >> >> more information about this event, see ISA Server Help. (10065).'
> >> >> >>
> >> >> >> Maybe remote connections need to be configured in ISA2000. This we
> >> >> >> haven't
> >> >> >> checked yet as we are quite inexperienced with ISA.
> >> >> >>
> >> >> >> Finally, whether this is relevant or not. If we do a simple query
> >> >> >> test
> >> >> >> in
> >> >> >> the DNS console and a recursive query test, they both fail. Yet,
> >> >> >> DNS
> >> >> >> tests in
> >> >> >> a command prompt via dcdiag and netdiag, and the event log all show
> >> >> >> up
> >> >> >> ok.
> >> >> >> Can't work it out.
> >> >> >>
> >> >> >> Many thanks to all who took their time to read and understand our
> >> >> >> issue.
> >> >> >>
> >> >> >> Thank you
> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >
> >> >> >
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
.

Quantcast