Multihomed Network w/ Win2K3 Server

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I'm having issues setting a multi-homed server (Win2K3) as a router.
Basically, I've split my network into two subnets, and the only
connection between the two is the Win2K3 server. Here's the config:


(Internet, Router/Firewall)
|
|
(192.168.42.1, 192.168.42.250)
SBS Server1 (DHCP, DNS, WINS, ISA)
(192.168.16.2, 192.168.42.5)
|
|
Office Network (192.168.16.x)
|
|
(192.168.16.10)
Server2 (DHCP)
(192.168.14.1)
|
|
Equip. Network (192.168.14.x)

Server1 is assigning IP addresses to the office network via DHCP

Server2 is assigning IP addresses to the Equip. Network via DHCP

Server2 config:

NIC1
IP: 192.168.16.10
Mask: 255.255.255.0
DNS: 192.168.16.2
Gtwy: 192.168.16.2

NIC2
IP: 192.168.14.1
Mask: 255.255.255.0
DNS: 192.168.16.2
Gtwy: (none)

DHCP (Server2)
003 Router: 192.168.16.2
006 DNS Servers: 192.168.16.2
016 DNS Domain Name: (same as Server1, subdomain.FQDN.com.)
044 WINS/NBNS Servers: 192.168.16.2, 192.168.16.2
046 WINS/NBT Node Type: 0x8

Firewalls are not enabled on either NIC.

DNS info is NOT passing through Server2.
Names are not resolving on the Equip. side.
I cannot ping any office side(16.x) addresses from the Equip(14.x)
side.
I cannot ping any 14.x addresses from the office side.
If I set the DHCP Router on Server2 to 192.168.14.1, I can ping
192.168.16.10 (NIC1 on Server2) from the Equip side, but nothing else
on the office side.

I have tried installing RRAS using the wizard (custom config, LAN
Routing).
I have tried it without RRAS installed.
I have tried adding a DHCP Relay Agent to RRAS and disabling the DHCP
Server on Server2. Clients could no longer obtain IP Addresses.
If I 'route add 192.168.16.0 mask 255.255.255.0 192.168.14.1 metric 1'
on the equipment side client computer, I can ping 192.168.16.10, but
not 16.2. Tracert shows a direct link (should it not show a hop over
14.1?)

Any ideas?

Here's the Routing Table from Server2:


IPv4 Route Table
===========================================================================

Interface List
0x1 ........................... MS TCP Loopback interface
0x30003 ...00 11 43 5a 64 de ...... Intel(R) PRO/1000 MT Network
Connection #2
0x30005 ...00 11 43 5a 64 dd ...... Intel(R) PRO/1000 MT Network
Connection
===========================================================================

===========================================================================

Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.16.2 192.168.16.10
10
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1
1
192.168.14.0 255.255.255.0 192.168.14.1 192.168.14.1
10
192.168.14.1 255.255.255.255 127.0.0.1 127.0.0.1
10
192.168.14.255 255.255.255.255 192.168.14.1 192.168.14.1
10
192.168.16.0 255.255.255.0 192.168.16.10 192.168.16.10
10
192.168.16.10 255.255.255.255 127.0.0.1 127.0.0.1
10
192.168.16.255 255.255.255.255 192.168.16.10 192.168.16.10
10
224.0.0.0 240.0.0.0 192.168.14.1 192.168.14.1
10
224.0.0.0 240.0.0.0 192.168.16.10 192.168.16.10
10
255.255.255.255 255.255.255.255 192.168.14.1 192.168.14.1
1
255.255.255.255 255.255.255.255 192.168.16.10 192.168.16.10
1
Default Gateway: 192.168.16.2
===========================================================================

Persistent Routes:
None

.

Relevant Pages

  • Re: "logon failure: the user has not been granted the requested lo
    ... logs when I received this error message. ... But, to answer your question in another way, this server2 is a file/print ... server and needs to be accessable from any authenticated user on the network. ... The network users authenticated the network logon thru domain1. ...
    (microsoft.public.windows.server.general)
  • Re: Securing Network with MAC address
    ... You could create a dhcp scope that only has reservations for the computers in the ... access to your network. ... > server, especially for Server2. ...
    (microsoft.public.win2000.security)
  • Re: Unable To Browse Network Issue
    ... Posting on MS newsgroup will benefit all readers and you may get more help. ... How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com ... > No computer on the network NOR any server except for Server2 can browse the ...
    (microsoft.public.windows.server.networking)
  • Re: Unable To Browse Network Issue
    ... > How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com ... > No computer on the network NOR any server except for Server2 can browse the ... You might not have permission to use this network resource. ...
    (microsoft.public.windows.server.networking)
  • Re: OLAP and VPN / authentication / trust
    ... I hoped there is a way to only trust one PC in the other domain. ... You need Network 2 to trust Network 1 users to access the resources on ... SERVER1 to trust SERVER2? ... I can ping and I can use the SQL server ...
    (microsoft.public.sqlserver.olap)