Re: Problem configuring NAT to share Internet Connection



Hi Robert,

I have tried configuring the default gateway but it didn't work either.

I tell you that I have discovered on the weekend that I don't have a DSL
modem, but a DSL router, so that it has it's own IP address, 192.168.1.1.
That's why the NIC connected to it needs to be assigned a static IP.

Finally, the configuration of the NIC's was as follows:

1.- DSL router -> 192.168.1.1
2.- NIC A connected to the DSL router -> 192.168.1.2
3.- NIC B connected to the LAN -> 192.168.1.3
4.- Client computer 1 -> 192.168.1.4
5.- Client computer 2 -> 192.168.1.5

That way, in the server I need to create a broadband connection, as always.
And after connected I think I can treat the connection as if it is always on.

I have reconfigured RRAS to be NIC B the NIC with IP routing, and I have
configured DHCP scope to assign default gateway 19.168.1.1 but it didn't
work. And If I configure the default gateway of NIC A to be also 192.168.1.1,
server cannot browse Internet.

Finally, I continue only to resolve well the host names from the clients,
but not to connect.

I'm wondering why using ICS/ICF all is configured good automatically, at
first try. What does it do internally? I followed a lot of microsoft pages
that shows what it is configured by ICS and I tried to imitate it, but
without success.

The problem I have now is that I cannot configure ICS/ICF again, because
that option isn't appear in the broadband network connection advanced tab
properties, as before.

Jaime

"Robert L [MS-MVP]" wrote:

> The client routing table looks good too. you may want to re-setup RRAS and make sure no filtering blocking the traffic. I just worked on a similar case. although the resolution is not for your case, it may give you some tips. quoted from http://www.howtonetworking.com/casestudy.htm
>
> Case Study - Can't access the Internet through Windows Server 2003 as a router
> Situation: A law firm IT department supports three attorney offices. Recently, they decided to separated the LAN into three subnets by adding a Windows Server 2003 with four network cards as a router.
>
> The Windows 2003 Standard Server was configured with RRAS and DHCP capabilities. The 4 NICs were installed and configured (192.168.0.1 connecting to a Sonicwall firewall, 192.168.1.0/24 for the LAN1, 192.168.2.0/24 for LAN2 and 192.168.3.0/24 for the LAN3). RRAS was installed using the custom configuration option with just LAN Routing. DHCP was installed and configured.
>
> Problem: The router server can ping all LAN and access the Internet. But no computers in three LANs can access the Internet. They can ping the inside IP of the server but not the outside NIC's IP, 192.168.0.1. So, they called chicagoTech.net for help.
>
> Troubleshooting:
>
> 1. Ipconfig /all on the server displayed correct settings and IP routing was enabled.
>
> 2. Re-configured the RRAS.
>
> 3. No ISA, NAT or oother security software running.
>
> 4. No filtering blocked the traffic.
>
> 5. Client ipconfig /all displayed uncorrected default gateway which was assigned by DHCP, for example, a computer in the LAN1 had default IP 192.168.0.1 instead of 192.168.1.1. Note: default gateway must in the same subnet.
>
> Resolution: modified the DHCP Scope Options and assigned the router accordingly.
>
> Related Topics
>
> Routing Issues
>
>
> Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
>
> I recommend Brinkster for web hosting!
>
> "Jaime Stuardo" <JaimeStuardo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:ADE4BD9C-33E6-4BF5-B4CC-3CCBD33B4EB2@xxxxxxxxxxxxxxxx
> This is the client routing table:
>
> ===========================================================================
> Interface List
> 0x1 ........................... MS TCP Loopback interface
> 0x10003 ...00 0c 6e 2f cf f9 ...... SiS 900-Based PCI Fast Ethernet Adapter
> - Pa
> cket Scheduler Miniport
> ===========================================================================
> ===========================================================================
> Active Routes:
> Network Destination Netmask Gateway Interface Metric
> 0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.3 20
> 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
> 192.168.0.0 255.255.255.0 192.168.0.3 192.168.0.3 20
> 192.168.0.3 255.255.255.255 127.0.0.1 127.0.0.1 20
> 192.168.0.255 255.255.255.255 192.168.0.3 192.168.0.3 20
> 224.0.0.0 240.0.0.0 192.168.0.3 192.168.0.3 20
> 255.255.255.255 255.255.255.255 192.168.0.3 192.168.0.3 1
> Default Gateway: 192.168.0.1
> ===========================================================================
> Persistent Routes:
> None
>
>
> Other question: do you know what "Internal" interface is?
> In RRAS MMC, NAT/Basic firewall node, appear 3 interfaces (automatically
> added by the wizard): LAN, Internet and Internal. LAN and Internet correspond
> with both NICS in the server. What about "Internal"? I could think that is is
> the DSL modem, but, why the name is Internal and not something more
> meaningful, such as "external"? why cannot I delete it?
>
> Thanks
> Jaime
>
>
> "Robert L [MS-MVP]" wrote:
>
> > the routing table you posted look good. but i wish you posted the client routing table too.
> > For more and other information, go to http://howtonetworking.com.
> >
> > Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
> >
> > Bob Lin, MS-MVP, MCSE & CNE
> > How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> > Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> > This posting is provided "AS IS" with no warranties.
> > I recommend Brinkster for web hosting!
> >
> > "Jaime Stuardo" <JaimeStuardo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:4A97B2E2-63ED-42E3-8B88-E8334DFC989C@xxxxxxxxxxxxxxxx
> > I have checked NAT configuration and all seems OK and the site you gave
> > doesn't help too much.
> >
> > But can you say something about the information I posted? does it look right?
> >
> > The main problem I have, that isn't treated in any site I visited, is
> > concerning the hardware I have. One of my NICs in the server connect to a DSL
> > modem and it connects to internet. How can I manage that case in RRAS console?
> >
> > Thanks
> > Jaime
> >
> >
> >
> > "Robert L [MS-MVP]" wrote:
> >
> > > I would check the NAT settings first. For more and other information, go to http://howtonetworking.com.
> > >
> > > Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
> > >
> > > Bob Lin, MS-MVP, MCSE & CNE
> > > How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> > > Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> > > This posting is provided "AS IS" with no warranties.
> > > I recommend Brinkster for web hosting!
> > >
> > > "Jaime Stuardo" <JaimeStuardo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:4229B080-1F1D-464C-A587-FB7D50C1FA24@xxxxxxxxxxxxxxxx
> > > Hi robert,
> > >
> > > This is the routing table of the server:
> > >
> > > Network Destination Netmask Gateway Interface Metric
> > > 0.0.0.0 0.0.0.0 200.74.186.1 200.74.186.222 1
> > > 10.0.0.0 255.0.0.0 10.0.0.1 10.0.0.1 10
> > > 10.0.0.1 255.255.255.255 127.0.0.1 127.0.0.1 10
> > > 10.255.255.255 255.255.255.255 10.0.0.1 10.0.0.1 10
> > > 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
> > > 192.168.0.0 255.255.255.0 192.168.0.1 192.168.0.1 20
> > > 192.168.0.1 255.255.255.255 127.0.0.1 127.0.0.1 20
> > > 192.168.0.255 255.255.255.255 192.168.0.1 192.168.0.1 20
> > > 200.74.186.1 255.255.255.255 200.74.186.222 200.74.186.222 1
> > > 200.74.186.222 255.255.255.255 127.0.0.1 127.0.0.1 50
> > > 200.74.186.255 255.255.255.255 200.74.186.222 200.74.186.222 50
> > > 224.0.0.0 240.0.0.0 10.0.0.1 10.0.0.1 10
> > > 224.0.0.0 240.0.0.0 192.168.0.1 192.168.0.1 20
> > > 224.0.0.0 240.0.0.0 200.74.186.222 200.74.186.222 1
> > > 255.255.255.255 255.255.255.255 10.0.0.1 10.0.0.1 1
> > > 255.255.255.255 255.255.255.255 192.168.0.1 192.168.0.1 1
> > > 255.255.255.255 255.255.255.255 200.74.186.222 200.74.186.222 1
> > > Default Gateway: 200.74.186.1
> > >
> > > This is the IPCONFIG information of the server (where you can see Internet
> > > interface, that connects to the DSL modem, LAN interface, that connects to
> > > the LAN and the Manquehue interface that is the DSL modem itself):
> > >
> > > Windows IP Configuration
> > >
> > > Host Name . . . . . . . . . . . . : srv-dev
> > > Primary Dns Suffix . . . . . . . : DESYTEC.North
> > > Node Type . . . . . . . . . . . . : Unknown
> > > IP Routing Enabled. . . . . . . . : Yes
> > > WINS Proxy Enabled. . . . . . . . : Yes
> > > DNS Suffix Search List. . . . . . : DESYTEC.North
> > >
> > > Ethernet adapter Internet:
> > >
> > > Connection-specific DNS Suffix . :
> > > Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
> > > Physical Address. . . . . . . . . : 00-11-43-2F-69-26
> > > DHCP Enabled. . . . . . . . . . . : No
> > > IP Address. . . . . . . . . . . . : 10.0.0.1
> > > Subnet Mask . . . . . . . . . . . : 255.0.0.0
> > > Default Gateway . . . . . . . . . :
> > > DNS Servers . . . . . . . . . . . : 127.0.0.1
> > >
> > > Ethernet adapter LAN:
> > >
> > > Connection-specific DNS Suffix . :
> > > Description . . . . . . . . . . . : D-Link DFE-530TX PCI Fast Ethernet
> > > Adapte
> > > r (rev.C)
> > > Physical Address. . . . . . . . . : 00-0D-88-CA-8F-CC
> > > DHCP Enabled. . . . . . . . . . . : No
> > > IP Address. . . . . . . . . . . . : 192.168.0.1
> > > Subnet Mask . . . . . . . . . . . : 255.255.255.0
> > > Default Gateway . . . . . . . . . :
> > > DNS Servers . . . . . . . . . . . : 127.0.0.1
> > >
> > > PPP adapter Manquehue:
> > >
> > > Connection-specific DNS Suffix . :
> > > Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
> > > Physical Address. . . . . . . . . : 00-53-45-00-00-00
> > > DHCP Enabled. . . . . . . . . . . : No
> > > IP Address. . . . . . . . . . . . : 200.74.186.222
> > > Subnet Mask . . . . . . . . . . . : 255.255.255.255
> > > Default Gateway . . . . . . . . . : 0.0.0.0
> > > DNS Servers . . . . . . . . . . . : 200.74.160.103
> > > 200.74.160.104
> > > NetBIOS over Tcpip. . . . . . . . : Disabled
> > >
> > > As another fact, I tell you that DNS is working properly. For example, this
> > > is the TRACERT response from the client:
> > >
> > > C:\Documents and Settings\Administrator>tracert www.google.cl
> > >
> > > Tracing route to www.l.google.com [64.233.161.147]
> > > over a maximum of 30 hops:
> > >
> > > 1 <1 ms <1 ms <1 ms 192.168.0.1
> > > 2 * * * Request timed out.
> > > 3 * * * Request timed out.
> > > 4 * * * Request timed out.
> > >
> > > And finally, this is the PathPing response from the client:
> > >
> > > C:\Documents and Settings\Administrator>PathPing www.google.cl
> > >
> > > Tracing route to www.l.google.com [64.233.161.104]
> > > over a maximum of 30 hops:
> > > 0 carolina.DESYTEC.North [192.168.0.2]
> > > 1 192.168.0.1
> > > 2 * * *
> > > Computing statistics for 50 seconds...
> > >
> > >
> > > As you see, packets reach 192.168.0.1 (LAN interface in the server) but it
> > > isn't redirected to the 10.0.0.1 interface.
> > >
> > > Additionally, I tell you that in RRAS console I have these "strange" things:
> > >
> > > 1.- Network Interaces:
> > > a.- Manquehue Interface, type: Demand-dial, status: Enabled, Connection
> > > State: Unreachable
> > > b.- Loopback Interface (looks correct)
> > > c.- LAN Interface (looks correct)
> > > d.- Internet Interface (looks correct)
> > > e.- Internal Interface, type: Internal, status: Enabled, Connection
> > > state: Connected (what is this interface?)
> > > 2.- Ports: Status of all ports appear Inactive
> > > 3.- IP routing:
> > > a.- General: Manquehue IP address appears "Not available" and
> > > Unreachable. Internal IP address also appears "Not available", Unknown
> > > administrative status and non-operational.
> > > b.- Static routes: Dest->0.0.0.0, Network mask->0.0.0.0, Gateway->none,
> > > Interface->Manquehue, Metric->1, View->Both (I have added this entry manually)
> > > c.- IGMP: Manquehue protocol is Proxy and state is down. Querier address
> > > is 0.0.0.0. Internet protocol is Router V3 and state is Querier. Querier
> > > address is 10.0.0.1
> > > d.- NAT/Basic Firewall: Manquehue , Internet and Internal. All of them
> > > never show numbers different from 0 in Mappings and Packets traslated and
> > > rejected columns.
> > > 4.- Remote Access Policies, I kept default policies (2 policies)
> > >
> > >
> > > I hope that with all this antecedents you can guide me to solve the problem.
> > >
> > > Thanks a million in advance
> > > Jaime
> > >
> > >
> > > "Robert L [MS-MVP]" wrote:
> > >
> > > > assuming you can access the Internet from the server but not from the clients, you may have a routing issue. posting the result of routing tables of both server and client ay help, For more and other information, go to http://howtonetworking.com.
> > > >
> > > > Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
> > > >
> > > > Bob Lin, MS-MVP, MCSE & CNE
> > > > How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
> > > > Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> > > > This posting is provided "AS IS" with no warranties.
> > > > I recommend Brinkster for web hosting!
> > > >
> > > > "Jaime Stuardo" <JaimeStuardo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:72B5E074-0408-4F11-94AE-D59DF59EE690@xxxxxxxxxxxxxxxx
> > > > Hi all...
> > > >
> > > > I spent too much time trying to configure NAT in Windows Server 2003 to let
> > > > other LAN PC's to connect to Internet through the server without success.
> > > >
> > > > This is the scenario:
> > > >
> > > > 1.- Window Server 2003 machine with 2 NIC's, NIC A and NIC B.
> > > > 2.- NIC A is connected by mean of a UTP cable to a DSL modem. I have
> > > > assigned NIC A this IP address: 10.0.0.1
> > > > 3.- NIC B is connected to a hub. I have assigned NIC B this IP address:
> > > > 192.168.0.1
> > > > 4.- 2 PC's connected to the hub. Their IP addresses are: 192.168.0.2 and
> > > > 192.168.0.3
> > > > 5.- Server is a domain controller and all LAN PC's are joined to the domain.
> > > > 6.- LAN works perfect.
> > > > 7.- To connect server to Internet, I create a new network connection. So,
> > > > finally I have 3 network connections, 2 corresponding with NIC A and NIC B
> > > > that were configured automatically when I installed operating system. The
> > > > 3rd. connection corresponds the connection to my ISP, that assigns a dynamic
> > > > IP each time I dial it.
> > > >
> > > > This was what I did:
> > > >
> > > > 1.- Installed RRAS/VPN server role.
> > > > 2.- In MMC console, under network connections node I can see some
> > > > connections. 2 corresponds to the NICs A and B and other, named Internal, I
> > > > think corresponds to the DSL modem.
> > > > 3.- Since I need RRAS to demand dial my ISP, I created there a new network
> > > > interface using the same name as in Network Connections in control panel.
> > > > 4.- When the new interface appears in the list, it says that it is
> > > > unreachable. I try to connect but it says that modem is being used.
> > > > 5.- I was already connected to Internet so I disconnected
> > > > 6.- I tried to connect that interface again using RRAS console and it cannot
> > > > due to time out.
> > > > 7. I tried several ways, using all the wizards and manually, but I cannot
> > > > make it to work. Only server could browse internet, but not client computers.
> > > >
> > > > Any help will be greatly appreciated. My main problem is that I connect one
> > > > NIC to a DSL modem that assigns a dynamic IP.
> > > >
> > > > Thanks a lot in advance,
> > > > Jaime
> > > >
.



Relevant Pages

  • Re: Windows 2000 server unable to see its local or other network s
    ... The configuration of my system is similar to ... The internet facing NIC is configured with; ... DNS server entries for ISP given DNS servers ... >> As each server has 2 nics, one public and the other private, I have ...
    (microsoft.public.win2000.networking)
  • Re: IP Routing Across Dual-homed 2003 Server
    ... Networking, Internet, Routing, VPN Troubleshooting on ... > (where the XP client resides). ... I'd like to know how I can setup the NICs and/or ...
    (microsoft.public.windows.server.networking)
  • Re: cannot access domain or internet with two nic cards active
    ... Only AT&T could come up with this kind of mess for business Internet access: ... If the ISP is controlling the configuration of the Netopia modem-router ... Two Nics, a static IP address, ISA, router ... the server from 1 nic to two nic cards utilizing the firewall services ...
    (microsoft.public.windows.server.sbs)
  • Re: Providing Internet Access to Three PCs in Workgroup
    ... I need to place these computers ... > Internet using existing modem/router hardware. ... I know that this multihomed configuration is ... the extra NICs and all is working, ...
    (microsoft.public.win2000.networking)
  • Re: Win2k3 LAN Routing Questions
    ... Posting the routing table here may help. ... Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net ... I can ping both NICs from hosts on each segment, ... Network Mask: 255.255.255.0 ...
    (microsoft.public.windows.server.networking)