Re: RRAS/VPN Win 2003 SP1

Tech-Archive recommends: Fix windows errors by optimizing your registry

They called my cell yesterday but I missed the call. I hit redial and was
told that the number that pops up is the number for a bazillion people. I'm
still waiting but I'll keep y'all up to speed!

Arch

"shudson" <shudson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F7E87D9B-79CE-4814-806D-245978F3A0D9@xxxxxxxxxxxxxxxx
> Thanks for letting me know Arch,
> I can repeat this problem time and time again on a test set-up that I have
> thown together. I have discovered (with Network Monitor) that the packets
> travel as follows: -
> 1. From Client - OK
> 2. In to the local RRAS server LAN NIC - OK
> 3. Out of the local RRAS server Internet NIC (in tunnel) - OK
> 4. In to the remote RRAS server Internet NIC (in tunnel) - OK
> 5. Then nothing on the remote RRAS server LAN NIC !!!
> Same in both directions!
>
> Please keep me (all of us) informed, when you have time
> Regards
> shudson
>
> "Arch Willingham" wrote:
>
>> I opened up a support call on this same issue about a week ago. They have
>> acknowledged it is a big and are working on it right now.
>>
>> Arch
>>
>> "Georgi Enchev" <gweorgi_e@xxxxxxxxxxx> wrote in message
>> news:OS0ng9zPFHA.3988@xxxxxxxxxxxxxxxxxxxxxxx
>> > We have exactly the same problem - after applying SP1 to the server at
>> > the
>> > head office no ping to remote sites from within the LAN except from the
>> > RAS server itself, however there are many remote sites building
>> > site-to-site VPN with our head office, and there IS connectivity in
>> > both
>> > directions, only ICMP seems to be blocked. Also we have ISA 2000 on the
>> > central site.
>> >
>> > "Robert L [MS-MVP]" <noreply@xxxxxxxxxxx> wrote in message
>> > news:eyXVEbqPFHA.3076@xxxxxxxxxxxxxxxxxxxxxxx
>> > assuming this is firewall issue and server can ping but not client,
>> > what's
>> > the routing tables on both site? posting them here may help.
>> > For more and other information, go to http://howtonetworking.com.
>> >
>> > Don't send e-mail or reply to me except you need consulting services.
>> > Posting on MS newsgroup will benefit all readers and you may get more
>> > help.
>> >
>> > Bob Lin, MS-MVP, MCSE & CNE
>> > How to Setup Windows, Network, Remote Access on
>> > http://www.HowToNetworking.com
>> > Networking, Internet, Routing, VPN Troubleshooting on
>> > http://www.ChicagoTech.net
>> > This posting is provided "AS IS" with no warranties.
>> > I recommend Brinkster for web hosting!
>> > "shudson" <shudson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> > news:FE046109-3FD5-45B2-8A95-7E12CA7FC6C9@xxxxxxxxxxxxxxxx
>> > We have a simple, two office network set-up, LAN in UK (192.168.1.0/24)
>> > and a
>> > LAN in France (192.168.2.0/24) all XP Pro clients. These have been
>> > linked
>> > for
>> > 18 months, using Win2K3 RRAS servers (Demand Dial, Static Route and
>> > Address
>> > Pool). With SP1 for Win2k3 installed on the RRAS servers, everything
>> > looks
>> > OK
>> > (In RRAS Admin) however you cannot connect, or Ping through the tunnel,
>> > to
>> > or
>> > from clients. RRAS servers can 'ping' the whole of the remote LAN. I've
>> > used
>> > PING, PINGPATH, TRACERT, ROUTE PRINT and NETDIAG there are no
>> > differences
>> > in
>> > their results, before or after SP1.
>> >
>> > If I take SP1 off (nothing else is changed), everything is fine again.
>> > I've
>> > tried this many times over the last few days, with 3 different RRAS
>> > servers.
>> > Always the same result.
>> >
>> > Each client has a route for the remote LAN (for example 192.168.2.0
>> > mask
>> > 255.255.255.0) and IP routing is enabled at the RRAS servers
>> > I'm 'pinging' using IP Addresses. 'Ping' Error is 'Request Timed Out'
>> > 'Tracert, from any client, stops after (correctly) showing the IP
>> > address
>> > of
>> > the local RASS server Intranet NIC (for example 192.168.1.1). There is
>> > no
>> > Windows Firewall on the RRAS servers (Windows prevents this when RRAS
>> > is
>> > ruining).
>> >
>> > I know this seems like a RRAS IP Routing issues, However this is a
>> > 'textbook' set-up that works correctly without SP1 installed.
>> >
>>
>>
>>


.